CVE-2019-13929

Medium

Description

A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security vulnerability could be exploited only if the attacker is authenticated. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

SeverityMedium
CVSS6.5
Exploit probability—
ProductSiemens Simatic It Uadm
PublishedOct 10, 2019
First seenOct 10, 2019
Weakness typeCWE-321CWE-321

How to fix

Update
  • siemens simatic_it_uadm1.3 or later

Affected products

ProductAffected versionsFixed in
siemens simatic_it_uadmv < 1.31.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.