CVE-2019-10938

CVE-2019-10938 is a critical vulnerability affecting Siemens SIPROTEC 5 devices (CP200, CP300, CP100 variants) and Siemens Power Meters Series 9410 and 9810. An unauthenticated attacker with network access can inject and execute arbitrary code before firmware verification, leading to full compromise of the device. This vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation were known at the time of advisory publication, and there is no evidence of Metasploit, Nuclei, or ExploitDB modules, its high severity warrants immediate patching.