CVE-2019-6568 Denial of service in SIMATIC CP 1604
An attacker can cause a denial of service by restarting the webserver on affected Siemens SIMATIC devices without privileges or user interaction.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6568?
CVE-2019-6568 is a high-severity denial of service vulnerability in Siemens SIMATIC CP 1604, published on 17 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.
Weakness: CWE-125
Which versions are affected by CVE-2019-6568?
It affects 53 products.
Products include Siemens Cp1604 Firmware, Siemens Cp1616 Firmware, Siemens Simatic Cp343-1 Advanced Firmware, Siemens Simatic Cp443-1 Advanced Firmware, Siemens Simatic Cp443-1 Firmware, Siemens Simatic Cp443-1 Opc Ua and 47 more.
How do I fix CVE-2019-6568?
No fix has been published for CVE-2019-6568 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-6568 being exploited?
There is no known exploitation of CVE-2019-6568 in the wild and no public exploit code.
Other vulnerabilities in Siemens SIMATIC CP 1604
Sources
Also known as GHSA-gm8r-2vc4-2wvx.