CVE-2019-10926

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). Communication with the device is not encrypted. Data transmitted between the device and the user can be obtained by an attacker in a privileged network position. The security vulnerability can be exploited by an attacker in a privileged network position which allows eavesdropping the communication between the affected device and the user. The user must invoke a session. Successful exploitation of the vulnerability compromises confidentiality of the data transmitted.

• CWE-319
• CWE-310

• http://www.securityfocus.com/bid/108725Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-816980.pdfMitigation, Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-162-02Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/108725Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-816980.pdfMitigation, Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-19-162-02Third Party Advisory, US Government Resource

Published

Jun 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10920A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.5
• CVE-2019-10921A vulnerability has been identified in LOGO! 8 BM (incl. SIP…7.5
• CVE-2019-10922A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…9.8
• CVE-2019-10923An attacker with network access to an affected product may c…7.5
• CVE-2019-10924A vulnerability has been identified in LOGO! Soft Comfort (A…7.8
• CVE-2019-10925A vulnerability has been identified in SIMATIC MV400 family …7.1
• CVE-2019-10927A vulnerability has been identified in SCALANCE SC-600 (V2.0…6.5
• CVE-2019-10928A vulnerability has been identified in SCALANCE SC-600 (V2.0…6.6
• CVE-2019-10929A vulnerability has been identified in SIMATIC CP 1626 (All …5.9
• CVE-2019-1093An information disclosure vulnerability exists when DirectWr…
• CVE-2019-10930A vulnerability has been identified in All other SIPROTEC 5 …
• CVE-2019-10931A vulnerability has been identified in All other SIPROTEC 5 …7.5