CVE-2019-6574

High

Description

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46), SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46). An improperly configured Parameter Read/Write execution via Field bus network may cause the controller to restart. The vulnerability could be exploited by an attacker with network access to the device. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.

SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Sinamics Perfect Harmony Gh180 With Nxg I Control Mlfb 6sr2 Firmware
PublishedMay 14, 2019
First seenMay 14, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
siemens sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr2_firmwareNo range specified—
siemens sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr3_firmwareNo range specified—
siemens sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr4_firmwareNo range specified—
siemens sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr2_firmwareNo range specified—
siemens sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr3_firmwareNo range specified—
siemens sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr4_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.