CVE-2019-10929

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2019
Source publication: Aug 13, 2019
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.8.1), SIMATIC S7-1500 Software Controller (All versions < V20.8), SIMATIC S7-PLCSIM Advanced (All versions < V3.0), SIMATIC STEP 7 (TIA Portal) (All versions < V16), SIMATIC WinCC (TIA Portal) (All versions < V16), SIMATIC WinCC OA (All versions < V3.16 P013), SIMATIC WinCC Runtime Advanced (All versions < V16), SIMATIC WinCC Runtime Professional (All versions < V16), TIM 1531 IRC (incl. SIPLUS NET variants) (All versions < V2.1). Affected devices contain a message protection bypass vulnerability due to certain properties in the calculation used for integrity protection. This could allow an attacker in a Man-in-the-Middle position to modify network traffic sent on port 102/tcp to the affected devices.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SIMATIC CP 1626

Vendor: Siemens
Product: SIMATIC CP 1626
Platforms: Unknown
Default status: Unknown

SIMATIC CP 1626 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Platforms: Unknown
Default status: Unknown

SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Platforms: Unknown
Default status: Unknown

SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V20.8	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC HMI Panel (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC HMI Panel (incl. SIPLUS variants)
Platforms: Unknown
Default status: Unknown

SIMATIC HMI Panel (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC NET PC Software V14

Vendor: Siemens
Product: SIMATIC NET PC Software V14
Platforms: Unknown
Default status: Unknown

SIMATIC NET PC Software V14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V14 SP1 Update 14	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC NET PC Software V15

Vendor: Siemens
Product: SIMATIC NET PC Software V15
Platforms: Unknown
Default status: Unknown

SIMATIC NET PC Software V15 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC S7-1200 CPU family (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Platforms: Unknown
Default status: Unknown

SIMATIC S7-1200 CPU family (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V4.4.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

Vendor: Siemens
Product: SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Platforms: Unknown
Default status: Unknown

SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC S7-1500 Software Controller

Vendor: Siemens
Product: SIMATIC S7-1500 Software Controller
Platforms: Unknown
Default status: Unknown

SIMATIC S7-1500 Software Controller · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V20.8	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC S7-PLCSIM Advanced

Vendor: Siemens
Product: SIMATIC S7-PLCSIM Advanced
Platforms: Unknown
Default status: Unknown

SIMATIC S7-PLCSIM Advanced · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V3.0	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC STEP 7 (TIA Portal)

Vendor: Siemens
Product: SIMATIC STEP 7 (TIA Portal)
Platforms: Unknown
Default status: Unknown

SIMATIC STEP 7 (TIA Portal) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V16	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC (TIA Portal)

Vendor: Siemens
Product: SIMATIC WinCC (TIA Portal)
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC (TIA Portal) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V16	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC OA

Vendor: Siemens
Product: SIMATIC WinCC OA
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC OA · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V3.16 P013	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Runtime Advanced

Vendor: Siemens
Product: SIMATIC WinCC Runtime Advanced
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Runtime Advanced · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V16	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Runtime Professional

Vendor: Siemens
Product: SIMATIC WinCC Runtime Professional
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Runtime Professional · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V16	`affected`	Unavailable	Unavailable	Unavailable	None listed

TIM 1531 IRC (incl. SIPLUS NET variants)

Vendor: Siemens
Product: TIM 1531 IRC (incl. SIPLUS NET variants)
Platforms: Unknown
Default status: Unknown

TIM 1531 IRC (incl. SIPLUS NET variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V2.1	`affected`	Unavailable	Unavailable	Unavailable	None listed