Researchers discovered an undocumented access feature in Siemens SIMATIC S7-1200 programmable logic controller (PLC) could be exploited by attackers to execute arbitrary code on affected devices. The feature was discovered by a team of researchers from the Ruhr-University Bochum in Germany. The medium-severity flaw was tracked as CVE-2019-13945 and received a CVSS score of 6.8, the issue is hard to exploit because requires a deep knowledge of the operating system used by the Siemens S7 controller.”]
Source: https://securityaffairs.co/wordpress/93939/ics-scada/siemens-simatic-flaw.html