Siemens SIMATIC Winac Rtx (f) Firmware vulnerabilities

3 CVEs affecting Siemens SIMATIC Winac Rtx (f) Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10936, published 2019-10-10.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5715, published 2018-01-04. Medium severity, CVSS 5.6. EPSS: 74% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel…
• CVE-2019-10936, published 2019-10-10. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
• CVE-2019-10923, published 2019-10-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.