{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"SPPA-T3000 MS3000 Migration Server","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SiNVR 3 Central Control Server (CCS)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC S7-1200 CPU","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"RUGGEDCOM ROS RSG9xx R/C","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"RUGGEDCOM ROS RMC8388","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"EN100 Ethernet module Modbus TCP","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC WinCC OA","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC CP 1626","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SCALANCE W700 versions ant\u00e9rieures \u00e0 V6.4","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC NET PC","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC WinCC Runtime Professional","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"EN100 Ethernet module IEC 61850 versions ant\u00e9rieures \u00e0 V4.37","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SPPA-T3000 Application Server versions ant\u00e9rieures \u00e0 Service Pack R8.2 SP1","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC WinCC Runtime Advanced","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"RUGGEDCOM ROS RSL910","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC WinCC (TIA Portal) versions ant\u00e9rieures \u00e0 V16","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Famille de commutateurs SCALANCE X-200IRT et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.4.2","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC S7-200 SMART CPU","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC WinCC OA versions ant\u00e9rieures \u00e0 3.16 patch version 13","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SiNVR 3 Video Server","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"EN100 Ethernet module DNP3","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SCALANCE W1700 versions ant\u00e9rieures \u00e0 V1.1","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"RUGGEDCOM ROS RSG2488","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"EN100 Ethernet module PROFINET IO","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"EN100 Ethernet module IEC104","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"RUGGEDCOM ROS RSG920P","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"TIM 1531 IRC","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"XHQ versions ant\u00e9rieures \u00e0 V6.0.0.2","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC STEP 7 (TIA Portal) versions ant\u00e9rieures \u00e0 V16","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"RUGGEDCOM ROS RST2228","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI Panel","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Famille de commutateurs SCALANCE X-200 et les variantes SIPLUSNET versions ant\u00e9rieures \u00e0 V5.2.4","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2019-13944","url":"https://www.cve.org/CVERecord?id=CVE-2019-13944"},{"name":"CVE-2019-18339","url":"https://www.cve.org/CVERecord?id=CVE-2019-18339"},{"name":"CVE-2019-18341","url":"https://www.cve.org/CVERecord?id=CVE-2019-18341"},{"name":"CVE-2019-18332","url":"https://www.cve.org/CVERecord?id=CVE-2019-18332"},{"name":"CVE-2019-18335","url":"https://www.cve.org/CVERecord?id=CVE-2019-18335"},{"name":"CVE-2019-18338","url":"https://www.cve.org/CVERecord?id=CVE-2019-18338"},{"name":"CVE-2018-14526","url":"https://www.cve.org/CVERecord?id=CVE-2018-14526"},{"name":"CVE-2019-18319","url":"https://www.cve.org/CVERecord?id=CVE-2019-18319"},{"name":"CVE-2019-18331","url":"https://www.cve.org/CVERecord?id=CVE-2019-18331"},{"name":"CVE-2019-18312","url":"https://www.cve.org/CVERecord?id=CVE-2019-18312"},{"name":"CVE-2019-18320","url":"https://www.cve.org/CVERecord?id=CVE-2019-18320"},{"name":"CVE-2019-18322","url":"https://www.cve.org/CVERecord?id=CVE-2019-18322"},{"name":"CVE-2019-18283","url":"https://www.cve.org/CVERecord?id=CVE-2019-18283"},{"name":"CVE-2019-18303","url":"https://www.cve.org/CVERecord?id=CVE-2019-18303"},{"name":"CVE-2019-18302","url":"https://www.cve.org/CVERecord?id=CVE-2019-18302"},{"name":"CVE-2019-18311","url":"https://www.cve.org/CVERecord?id=CVE-2019-18311"},{"name":"CVE-2019-18290","url":"https://www.cve.org/CVERecord?id=CVE-2019-18290"},{"name":"CVE-2019-18292","url":"https://www.cve.org/CVERecord?id=CVE-2019-18292"},{"name":"CVE-2019-18309","url":"https://www.cve.org/CVERecord?id=CVE-2019-18309"},{"name":"CVE-2019-18291","url":"https://www.cve.org/CVERecord?id=CVE-2019-18291"},{"name":"CVE-2019-18304","url":"https://www.cve.org/CVERecord?id=CVE-2019-18304"},{"name":"CVE-2019-18326","url":"https://www.cve.org/CVERecord?id=CVE-2019-18326"},{"name":"CVE-2019-18305","url":"https://www.cve.org/CVERecord?id=CVE-2019-18305"},{"name":"CVE-2019-18318","url":"https://www.cve.org/CVERecord?id=CVE-2019-18318"},{"name":"CVE-2013-3634","url":"https://www.cve.org/CVERecord?id=CVE-2013-3634"},{"name":"CVE-2019-18334","url":"https://www.cve.org/CVERecord?id=CVE-2019-18334"},{"name":"CVE-2019-18299","url":"https://www.cve.org/CVERecord?id=CVE-2019-18299"},{"name":"CVE-2019-13932","url":"https://www.cve.org/CVERecord?id=CVE-2019-13932"},{"name":"CVE-2019-18316","url":"https://www.cve.org/CVERecord?id=CVE-2019-18316"},{"name":"CVE-2019-18329","url":"https://www.cve.org/CVERecord?id=CVE-2019-18329"},{"name":"CVE-2019-10929","url":"https://www.cve.org/CVERecord?id=CVE-2019-10929"},{"name":"CVE-2019-13931","url":"https://www.cve.org/CVERecord?id=CVE-2019-13931"},{"name":"CVE-2019-18333","url":"https://www.cve.org/CVERecord?id=CVE-2019-18333"},{"name":"CVE-2019-18300","url":"https://www.cve.org/CVERecord?id=CVE-2019-18300"},{"name":"CVE-2019-18301","url":"https://www.cve.org/CVERecord?id=CVE-2019-18301"},{"name":"CVE-2019-18328","url":"https://www.cve.org/CVERecord?id=CVE-2019-18328"},{"name":"CVE-2019-18321","url":"https://www.cve.org/CVERecord?id=CVE-2019-18321"},{"name":"CVE-2019-13947","url":"https://www.cve.org/CVERecord?id=CVE-2019-13947"},{"name":"CVE-2019-18317","url":"https://www.cve.org/CVERecord?id=CVE-2019-18317"},{"name":"CVE-2019-18294","url":"https://www.cve.org/CVERecord?id=CVE-2019-18294"},{"name":"CVE-2019-13943","url":"https://www.cve.org/CVERecord?id=CVE-2019-13943"},{"name":"CVE-2019-18330","url":"https://www.cve.org/CVERecord?id=CVE-2019-18330"},{"name":"CVE-2019-18314","url":"https://www.cve.org/CVERecord?id=CVE-2019-18314"},{"name":"CVE-2019-18307","url":"https://www.cve.org/CVERecord?id=CVE-2019-18307"},{"name":"CVE-2019-13945","url":"https://www.cve.org/CVERecord?id=CVE-2019-13945"},{"name":"CVE-2019-18308","url":"https://www.cve.org/CVERecord?id=CVE-2019-18308"},{"name":"CVE-2013-3633","url":"https://www.cve.org/CVERecord?id=CVE-2013-3633"},{"name":"CVE-2019-18306","url":"https://www.cve.org/CVERecord?id=CVE-2019-18306"},{"name":"CVE-2019-18340","url":"https://www.cve.org/CVERecord?id=CVE-2019-18340"},{"name":"CVE-2019-18342","url":"https://www.cve.org/CVERecord?id=CVE-2019-18342"},{"name":"CVE-2019-18325","url":"https://www.cve.org/CVERecord?id=CVE-2019-18325"},{"name":"CVE-2018-4832","url":"https://www.cve.org/CVERecord?id=CVE-2018-4832"},{"name":"CVE-2019-18310","url":"https://www.cve.org/CVERecord?id=CVE-2019-18310"},{"name":"CVE-2019-13103","url":"https://www.cve.org/CVERecord?id=CVE-2019-13103"},{"name":"CVE-2019-13930","url":"https://www.cve.org/CVERecord?id=CVE-2019-13930"},{"name":"CVE-2019-18337","url":"https://www.cve.org/CVERecord?id=CVE-2019-18337"},{"name":"CVE-2019-18323","url":"https://www.cve.org/CVERecord?id=CVE-2019-18323"},{"name":"CVE-2019-18327","url":"https://www.cve.org/CVERecord?id=CVE-2019-18327"},{"name":"CVE-2018-18440","url":"https://www.cve.org/CVERecord?id=CVE-2018-18440"},{"name":"CVE-2019-18315","url":"https://www.cve.org/CVERecord?id=CVE-2019-18315"},{"name":"CVE-2019-18298","url":"https://www.cve.org/CVERecord?id=CVE-2019-18298"},{"name":"CVE-2019-13942","url":"https://www.cve.org/CVERecord?id=CVE-2019-13942"},{"name":"CVE-2019-18313","url":"https://www.cve.org/CVERecord?id=CVE-2019-18313"},{"name":"CVE-2019-18324","url":"https://www.cve.org/CVERecord?id=CVE-2019-18324"}],"links":[],"reference":"CERTFR-2019-AVI-615","revisions":[{"description":"Version initiale","revision_date":"2019-12-10T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance (XSS)"},{"description":"Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-451445 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-418979 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-418979.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-170686 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-344983 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-344983.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-761617 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-618620 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-618620.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-525454 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-525454.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-686531 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-686531.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-273799 du 10 d\u00e9cembre 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-273799.pdf"}]}