{"id":"CVE-2019-13923","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-13923","generatedAt":"2026-10-28T21:32:01.318Z","title":"A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions).","description":"A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.","published":"2019-09-13T17:15:12.000Z","lastModified":"2026-06-17T02:17:25.000Z","status":"Modified","sourceIdentifier":"productcert@siemens.com","cvss":{"version":"3.1","score":9.6,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"},"cwe":["CWE-80","CWE-79"],"affected":["siemens/ie\\/wsn-pa link wirelesshart gateway firmware"],"epss":{"score":0.0112,"percentile":0.65995,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.12%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf","tags":["Vendor Advisory"],"source":"productcert@siemens.com"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-253-04","source":"productcert@siemens.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-253-04","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-13923","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}