{"schemaVersion":3,"id":"CVE-2019-6572","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability has been identified in SIMATIC HMI Comfort Panels 4\" - 22\" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions). The affected device offered SNMP read and write capacities with a publicly know hardcoded community string. The security vulnerability could be exploited by an attacker with network access to the affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.","dates":{"published":"2019-05-14T19:54:48.000Z","modified":"2024-08-04T20:23:22.238Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.1,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.4,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02721,"percentile":0.85827,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02721},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02721,"percentile":0.85827}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02721,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02721,"percentile":0.85827}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-798","name":"Use of Hard-coded Credentials","description":"The product contains hard-coded credentials, such as a password or cryptographic key.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/798.html"}],"affected":[{"vendor":"siemens ag","product":"simatic hmi classic devices (tp/mp/op/mp mobile panel)","name":"SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)","label":"simatic hmi classic devices (tp/mp/op/mp mobile panel)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens_ag/simatic_hmi_classic_devices_tpmpopmp_mobile_panel"},{"vendor":"siemens ag","product":"simatic hmi comfort outdoor panels 7\" & 15\"","name":"SIMATIC HMI Comfort Outdoor Panels 7\" & 15\"","label":"simatic hmi comfort outdoor panels 7\" & 15\"","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V15.1 Update 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V15.1 Update 1","eol":null,"hubHref":"/vendor/siemens_ag/simatic_hmi_comfort_outdoor_panels_7__15"},{"vendor":"siemens ag","product":"simatic hmi comfort panels 4\" - 22\"","name":"SIMATIC HMI Comfort Panels 4\" - 22\"","label":"simatic hmi comfort panels 4\" - 22\"","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V15.1 Update 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V15.1 Update 1","eol":null,"hubHref":"/vendor/siemens_ag/simatic_hmi_comfort_panels_4_-_22"},{"vendor":"siemens ag","product":"simatic hmi ktp mobile panels ktp400f, ktp700, ktp700f, ktp900 und ktp900f","name":"SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F","label":"simatic hmi ktp mobile panels ktp400f, ktp700, ktp700f, ktp900 und ktp900f","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V15.1 Update 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V15.1 Update 1","eol":null,"hubHref":"/vendor/siemens_ag/simatic_hmi_ktp_mobile_panels_ktp400f_ktp700_ktp700f_ktp900_und_ktp900f"},{"vendor":"siemens ag","product":"simatic wincc runtime advanced","name":"SIMATIC WinCC Runtime Advanced","label":"simatic wincc runtime advanced","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V15.1 Update 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V15.1 Update 1","eol":null,"hubHref":"/vendor/siemens_ag/simatic_wincc_runtime_advanced"},{"vendor":"siemens ag","product":"simatic wincc runtime professional","name":"SIMATIC WinCC Runtime Professional","label":"simatic wincc runtime professional","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V15.1 Update 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V15.1 Update 1","eol":null,"hubHref":"/vendor/siemens_ag/simatic_wincc_runtime_professional"},{"vendor":"siemens ag","product":"simatic wincc (tia portal)","name":"SIMATIC WinCC (TIA Portal)","label":"simatic wincc (tia portal)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V15.1 Update 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V15.1 Update 1","eol":null,"hubHref":"/vendor/siemens_ag/simatic_wincc_tia_portal"},{"vendor":"siemens","product":"simatic_hmi_comfort_outdoor_panels_firmware","name":"simatic hmi comfort outdoor panels firmware","label":"simatic_hmi_comfort_outdoor_panels_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_comfort_outdoor_panels"},{"vendor":"siemens","product":"simatic_hmi_comfort_panels_firmware","name":"simatic hmi comfort panels firmware","label":"simatic_hmi_comfort_panels_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_comfort_panels"},{"vendor":"siemens","product":"simatic_hmi_ktp_mobile_panels_ktp400f_firmware","name":"simatic hmi ktp mobile panels ktp400f firmware","label":"simatic_hmi_ktp_mobile_panels_ktp400f_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_ktp_mobile_panels_ktp400f"},{"vendor":"siemens","product":"simatic_hmi_ktp_mobile_panels_ktp700_firmware","name":"simatic hmi ktp mobile panels ktp700 firmware","label":"simatic_hmi_ktp_mobile_panels_ktp700_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_ktp_mobile_panels_ktp700"},{"vendor":"siemens","product":"simatic_hmi_ktp_mobile_panels_ktp700f_firmware","name":"simatic hmi ktp mobile panels ktp700f firmware","label":"simatic_hmi_ktp_mobile_panels_ktp700f_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_ktp_mobile_panels_ktp700f"},{"vendor":"siemens","product":"simatic_hmi_ktp_mobile_panels_ktp900_firmware","name":"simatic hmi ktp mobile panels ktp900 firmware","label":"simatic_hmi_ktp_mobile_panels_ktp900_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_ktp_mobile_panels_ktp900"},{"vendor":"siemens","product":"simatic_hmi_ktp_mobile_panels_ktp900f_firmware","name":"simatic hmi ktp mobile panels ktp900f firmware","label":"simatic_hmi_ktp_mobile_panels_ktp900f_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_hmi_ktp_mobile_panels_ktp900f"},{"vendor":"siemens","product":"simatic_wincc_runtime","name":"simatic wincc runtime","label":"simatic_wincc_runtime","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_wincc_runtime"},{"vendor":"siemens","product":"simatic_wincc_\\(tia_portal\\)","name":"simatic wincc \\(tia portal\\)","label":"simatic_wincc_\\(tia_portal\\)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.1","eol":null,"hubHref":"/vendor/siemens/simatic_wincc_tia_portal"}],"affectedCount":16,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-804486.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108412","label":"www.securityfocus.com/bid/108412","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://www.us-cert.gov/ics/advisories/ICSA-19-134-09","label":"www.us-cert.gov/ics/advisories/ICSA-19-134-09","hostname":"www.us-cert.gov","tags":["X Refsource MISC","Third Party Advisory","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-05-14T19:54:48.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T20:23:22.238Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:42:49.472Z","stale":false,"partial":false}}