Vulnerability Description
A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Ie\/Wsn-Pa Link Wirelesshart Gateway Firmware | All versions |
| Siemens | Ie\/Wsn-Pa Link Wirelesshart Gateway | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdfVendor Advisory
- https://www.us-cert.gov/ics/advisories/icsa-19-253-04
- https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdfVendor Advisory
- https://www.us-cert.gov/ics/advisories/icsa-19-253-04
FAQ
What is CVE-2019-13923?
CVE-2019-13923 is a vulnerability with a CVSS score of 9.6 (CRITICAL). A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks...
How severe is CVE-2019-13923?
CVE-2019-13923 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-13923?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Ie\/Wsn-Pa Link Wirelesshart Gateway Firmware, Siemens Ie\/Wsn-Pa Link Wirelesshart Gateway.