Siemens Siprotec 5 Digsi Device Driver vulnerabilities

3 CVEs affecting Siemens Siprotec 5 Digsi Device Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10938, published 2019-08-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10930, published 2019-07-11. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering…
CVE-2019-10931, published 2019-07-11. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering…
CVE-2019-10938, published 2019-08-02. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIPROTEC 5 devices with CPU variants CP200 (All versions < V7.59), SIPROTEC 5 devices with CPU variants CP300 and CP100 (All versions < V8.01), Siemens Power…