CVE-2019-10935

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2019
Source publication: Jul 11, 2019
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC Professional (TIA Portal V13) (All versions), SIMATIC WinCC Professional (TIA Portal V14) (All versions < V14 SP1 Upd 9), SIMATIC WinCC Professional (TIA Portal V15) (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). The SIMATIC WinCC DataMonitor web application of the affected products allows to upload arbitrary ASPX code. The security vulnerability could be exploited by an authenticated attacker with network access to the WinCC DataMonitor application. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SIMATIC PCS 7 V8.0 and earlier

Vendor: Siemens AG
Product: SIMATIC PCS 7 V8.0 and earlier
Platforms: Unknown
Default status: Unknown

SIMATIC PCS 7 V8.0 and earlier · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC PCS 7 V8.1

Vendor: Siemens AG
Product: SIMATIC PCS 7 V8.1
Platforms: Unknown
Default status: Unknown

SIMATIC PCS 7 V8.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V8.1 with WinCC V7.3 Upd 19	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC PCS 7 V8.2

Vendor: Siemens AG
Product: SIMATIC PCS 7 V8.2
Platforms: Unknown
Default status: Unknown

SIMATIC PCS 7 V8.2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC PCS 7 V9.0

Vendor: Siemens AG
Product: SIMATIC PCS 7 V9.0
Platforms: Unknown
Default status: Unknown

SIMATIC PCS 7 V9.0 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Professional (TIA Portal V13)

Vendor: Siemens AG
Product: SIMATIC WinCC Professional (TIA Portal V13)
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Professional (TIA Portal V13) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Professional (TIA Portal V14)

Vendor: Siemens AG
Product: SIMATIC WinCC Professional (TIA Portal V14)
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Professional (TIA Portal V14) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V14 SP1 Upd 9	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Professional (TIA Portal V15)

Vendor: Siemens AG
Product: SIMATIC WinCC Professional (TIA Portal V15)
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Professional (TIA Portal V15) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V15.1 Upd 3	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Runtime Professional V13

Vendor: Siemens AG
Product: SIMATIC WinCC Runtime Professional V13
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Runtime Professional V13 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Runtime Professional V14

Vendor: Siemens AG
Product: SIMATIC WinCC Runtime Professional V14
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Runtime Professional V14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V14.1 Upd 8	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Runtime Professional V15

Vendor: Siemens AG
Product: SIMATIC WinCC Runtime Professional V15
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC Runtime Professional V15 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V15.1 Upd 3	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC V7.2 and earlier

Vendor: Siemens AG
Product: SIMATIC WinCC V7.2 and earlier
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC V7.2 and earlier · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC V7.3

Vendor: Siemens AG
Product: SIMATIC WinCC V7.3
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC V7.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V7.3 Upd 19	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC V7.4

Vendor: Siemens AG
Product: SIMATIC WinCC V7.4
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC V7.4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V7.4 SP1 Upd 11	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC V7.5

Vendor: Siemens AG
Product: SIMATIC WinCC V7.5
Platforms: Unknown
Default status: Unknown

SIMATIC WinCC V7.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions < V7.5 Upd 3	`affected`	Unavailable	Unavailable	Unavailable	None listed