Siemens (CVE-2019-11745)

high Tenable OT Security Plugin ID 501619

Synopsis

The remote OT asset is affected by a vulnerability.

Description

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

Plugin Details

Severity: High

ID: 501619

File Name: tenable_ot_siemens_CVE-2019-11745.nasl

Version: 1.5

Type: Remote

Family: Tenable.ot

Published: 9/14/2023

Updated: 6/19/2026

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2019-11745

CVSS v3

Risk Factor: High

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/o:siemens:ruggedcom_rox_rx1400_firmware, cpe:/o:siemens:ruggedcom_rox_rx5000_firmware, cpe:/o:siemens:ruggedcom_rox_rx1501_firmware, cpe:/o:siemens:ruggedcom_rox_rx1500_firmware, cpe:/o:siemens:ruggedcom_rox_rx1512_firmware, cpe:/o:siemens:ruggedcom_rox_mx5000_firmware, cpe:/o:siemens:ruggedcom_rox_rx1510_firmware, cpe:/o:siemens:ruggedcom_rox_rx1511_firmware

Required KB Items: Tenable.ot/Siemens

Exploit Ease: No known exploits are available

Patch Publication Date: 1/8/2020

Vulnerability Publication Date: 1/8/2020

Reference Information

CVE: CVE-2019-11745

CWE: 787

GLSA: GLSA-202003-02, GLSA-202003-10, GLSA-202003-37

ICSA: 21-040-04

RHSA: RHSA-2020:0243, RHSA-2020:0466

SuSE: openSUSE-SU-2020:0002, openSUSE-SU-2020:0003, openSUSE-SU-2020:0008

USN: USN-4241-1, USN-4335-1

Detections

Analytics