March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – Siemens Industrial Products Multiple Vulnerabilities
September 11, 2019
Rewterz Threat Advisory – CVE-2019-10937 – Siemens SIMATIC TDC CP51M1 Denial of Service Vulnerability
September 11, 2019
Rewterz Threat Advisory – Siemens Industrial Products Multiple Vulnerabilities
September 11, 2019
Rewterz Threat Advisory – CVE-2019-10937 – Siemens SIMATIC TDC CP51M1 Denial of Service Vulnerability
September 11, 2019
Severity
Medium
Analysis summary
An attacker sending a malicious link to an unsuspecting user may be able to execute a cross-site scripting attack, which may allow information disclosure, code execution, or denial-of-service.
Impact
- Information disclosure
- Denial of service
Affected Vendors
Siemens
Affected Products
IE/WSN-PA Link WirelessHART Gateway all versions
Remediation
Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk:
- Only access links from trusted sources in the browser used to configure IE/WSN-PA Link.