Rewterz Threat Advisory – CVE-2019-13939 – ICS: Siemens Mentor Nucleus Networking Module

Severity

Medium

Analysis Summary

By sending specially crafted DHCP packets to a device, an attacker may be able to affect availability and integrity of the device. Attackers require adjacent network access to exploit this vulnerability, but do not require authentication or user interaction.

Impact

Improper Input Validation

Affected Vendors

Siemens

Affected Products

Mentor Nucleus Networking Module

Remediation

For the list of affected products, please see vendor’s advisory.

https://www.us-cert.gov/ics/advisories/icsa-19-318-01