{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"syngo Lab Process Manager","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Medicalis Intelligo","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Medicalis Workflow Orchestrator","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Rapid Point 500 versions 2.2, 2.2.1, 2.2.2, 2.3, 2.3.1 et 2.3.2","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"System ACOM.net 2.0, Mat. Nr. 05568386 (VC20A, VC21B, VC22B and VX22A)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"CentraLink","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"StreamLab","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Medicalis Referral Management","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"CS 5100 toutes versions sur Windows XP et Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SYSTEM ACOM.NET, Mat. Nr. 04815549 (VC20A, VC21B, VC22B and VX22A)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Sensis SIS Server Machine, Mat. Nr. 06648153 (VC11C/D, VC12B/C, VC12L/M)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo.via WebViewer","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo Imaging","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"SENSIS Dell High-End Server (VC12), Mat. Nr.10910620 (VC11C/D, VC12B/C, VC12L/M)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"AXIOM Vertix MD Trauma toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX PRO ACSS P toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"VERTIX SOLITAIRE toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"AUWi","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"VM SIS Virtual Server, Mat. Nr. 10765502 (VC11C/D, VC12B/C, VC12L/M)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MagicLinkA","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo.via","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo Workflow MLR","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Atellica COAG 360 toutes versions sur Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"AXIOM Multix M toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX Swing toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Atellica Solution","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Viva E","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"BCS XP toutes versions sur Windows XP et Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX TOP toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"AUWi Pro","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Sensis High End SIS Server, Mat. Nr. 10140973 (VC11C/D, VC12B/C, VC12L/M)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo Plaza","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Medicalis Clinical Decision Support","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"teamplay (receiver)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Atellica NEPH 630 toutes versions sur Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Screening Navigator","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Lantis","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX TOP ACSS toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"CS 2100 toutes versions sur Windows XP et Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"CS 2500 toutes versions sur Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"AXIOM Vertix Solitaire M toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX PRO P toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MOBILETT XP Digital toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"System ACOM-Net, Mat. Nr. 5903872 (VC20A, VC21B, VC22B and VX22A)","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MagicView300","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"BN ProSpec toutes versions sur Windows XP et Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MagicView1000W","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX PRO/PRO ACSS/PRO Navy toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Aptio by Inpeco","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo Workflow SLR","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo Dynamics","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Viva Twin","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"CS 2000 toutes versions sur Windows XP et Windows 7","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"MULTIX TOP P/TOP ACSS P toutes versions avec Canon Detector","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"syngo.via View&GO","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}},{"description":"Aptio by Siemens","product":{"name":"N/A","vendor":{"name":"Siemens","scada":true}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2019-0708","url":"https://www.cve.org/CVERecord?id=CVE-2019-0708"}],"links":[],"reference":"CERTFR-2019-AVI-240","revisions":[{"description":"Version initiale","revision_date":"2019-05-27T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Siemens. Elle\npermet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0\ndistance.\n","title":"SCADA Vuln\u00e9rabilit\u00e9 dans les produits Siemens","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-932041 du 24 mai 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-932041.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-166360 du 24 mai 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-166360.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-832947 du 24 mai 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-832947.pdf"},{"published_at":null,"title":"Alerte CERT-FR CERTFR-2019-ALE-006 du 15 mai 2019","url":"https://www.cert.ssi.gouv.fr/alerte/CERTFR-2019-ALE-006/"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-616199 du 24 mai 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-616199.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-406175 du 24 mai 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-406175.pdf"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Siemens ssa-433987 du 24 mai 2019","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-433987.pdf"}]}