CVE-2019-10939

A vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.8), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.8), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.3). The affected versions contain an open debug port that is available under certain specific conditions. The vulnerability is only available if the IP address is configured to 192.168.1.2. If available, the debug port could be exploited by an attacker with network access to the device. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.

• CWE-489

• https://cert-portal.siemens.com/productcert/pdf/ssa-359303.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-359303.pdfVendor Advisory

Published

Apr 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10933A vulnerability has been identified in Spectrum Power 3 (Cor…
• CVE-2019-10934A vulnerability has been identified in TIA Portal V14 (All v…7.8
• CVE-2019-10935A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…
• CVE-2019-10936Affected devices improperly handle large amounts of speciall…7.5
• CVE-2019-10937A vulnerability has been identified in SIMATIC TDC CP51M1 (A…7.5
• CVE-2019-10938A vulnerability has been identified in SIPROTEC 5 devices wi…9.8
• CVE-2019-1094An information disclosure vulnerability exists when the Wind…
• CVE-2019-10940A vulnerability has been identified in SINEMA Server (All ve…9.9
• CVE-2019-10941A vulnerability has been identified in SINEMA Server (All ve…5.3
• CVE-2019-10942A vulnerability has been identified in SCALANCE X-200 switch…8.6
• CVE-2019-10943A vulnerability has been identified in SIMATIC Drive Control…7.5
• CVE-2019-10945An issue was discovered in Joomla! before 3.9.5. The Media M…