CVE-2019-10936 - Affected devices improperly handle large amounts of specially crafted UDP packets

Back Back to CVE browser

HIGH

Affected devices improperly handle large amounts of specially crafted UDP packets

Published Oct 10, 2019

7.5

HIGH

CVSS 3.1

EPSS 2.07%

Description

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Affected products

Vendor Siemens Product Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Default
n/a
- Version
  All versions < V4.6 Patch 01
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic Cfu PA Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V1.2.0
Vendor Siemens Product Simatic ET 200al IM 157-1 PN Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET 200M (incl. SIPLUS variants) Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic ET 200mp IM 155-5 PN BA Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.3.0
Vendor Siemens Product Simatic ET 200mp IM 155-5 PN HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.4.0
Vendor Siemens Product Simatic ET 200mp IM 155-5 PN ST Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simatic ET 200s IM 151-8 Pn/dp Cpu Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic ET 200s IM 151-8f Pn/dp Cpu Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic ET 200sp IM 155-6 PN BA Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) Default
n/a
- Version
  All versions < V1.2.1
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic ET 200sp IM 155-6 PN HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.2.2
Vendor Siemens Product Simatic ET 200sp IM 155-6 PN HS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.0.1
Vendor Siemens Product Simatic ET 200sp IM 155-6 PN ST Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simatic ET 200sp IM 155-6 PN ST BA Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Simatic ET 200sp IM 155-6 Pn/2 HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.2.2
Vendor Siemens Product Simatic ET 200sp IM 155-6 Pn/3 HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.2.1
Vendor Siemens Product SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.0
Vendor Siemens Product SIMATIC ET 200pro IM 154-3 PN HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC ET 200pro IM 154-4 PN HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC ET 200pro IM 154-8 PN/DP CPU Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET 200pro IM 154-8F PN/DP CPU Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET 200pro IM 154-8FX PN/DP CPU Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200S (incl. SIPLUS variants) Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 4AO U/I 4xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC ET200ecoPN: IO-Link Master Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC HMI Comfort Panels (incl. SIPLUS variants) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC HMI KTP Mobile Panels Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC PN/PN Coupler Default
n/a
- Version
  All versions < V4.2.1
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC PROFINET Driver Default
n/a
- Version
  All versions < V2.1
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Default
n/a
- Version
  All versions < V4.4.0
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Default
n/a
- Version
  All versions < V2.0
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC S7-1500 Software Controller Default
n/a
- Version
  All versions < V2.0
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 314c-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 315-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 315f-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 315t-3 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 317-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 317f-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 317t-3 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 317tf-3 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 319-3 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-300 Cpu 319f-3 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic S7-400 Cpu 412-2 PN V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3
Vendor Siemens Product Simatic S7-400 Cpu 414-3 Pn/dp V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3
Vendor Siemens Product Simatic S7-400 Cpu 414f-3 Pn/dp V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3
Vendor Siemens Product Simatic S7-400 Cpu 416-3 Pn/dp V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3
Vendor Siemens Product Simatic S7-400 Cpu 416f-3 Pn/dp V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3
Vendor Siemens Product SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V6.0.9
Vendor Siemens Product SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) Default
n/a
- Version
  All versions < V8.2.2
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic Tdc Cp51m1 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V1.1.8
Vendor Siemens Product Simatic Tdc Cpu555 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V1.1.1
Vendor Siemens Product SIMATIC WinAC RTX 2010 Default
n/a
- Version
  All versions < V2010 SP3
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC WinAC RTX F 2010 Default
n/a
- Version
  All versions < V2010 SP3
  Status
  affected
  Constraints
  -
Vendor Siemens Product Sinamics Dcm Default
n/a
- Version
  All versions < V1.5 HF1
  Status
  affected
  Constraints
  -
Vendor Siemens Product Sinamics Dcp Default
n/a
- Version
  All versions < V1.3
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS G110M V4.7 PN Control Unit Default
n/a
- Version
  All versions < V4.7 SP10 HF5
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants) Default
n/a
- Version
  All versions < V4.7 SP10 HF5
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS G130 V4.7 Control Unit Default
n/a
- Version
  All versions < 4.8
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS G150 Control Unit Default
n/a
- Version
  All versions < 4.8
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS GH150 V4.7 Control Unit Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS GL150 V4.7 Control Unit Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS GM150 V4.7 Control Unit Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS S110 Control Unit Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants) Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SINAMICS S150 Control Unit Default
n/a
- Version
  All versions < 4.8
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS SL150 V4.7 Control Unit Default
n/a
- Version
  All versions < V4.7 HF33
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINAMICS SM120 V4.7 Control Unit Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Sinumerik 828d Default
n/a
- Version
  All versions < V4.8 SP5
  Status
  affected
  Constraints
  -
Vendor Siemens Product SINUMERIK 840D sl Default
n/a
- Version
  All versions < V4.8 SP6
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus ET 200mp IM 155-5 PN HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.4.0
Vendor Siemens Product Siplus ET 200mp IM 155-5 PN HF T1 Rail Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.4.0
Vendor Siemens Product Siplus ET 200mp IM 155-5 PN ST Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Siplus ET 200mp IM 155-5 PN ST TX Rail Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Siplus ET 200s IM 151-8 Pn/dp Cpu Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus ET 200s IM 151-8f Pn/dp Cpu Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN HF Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.2.2
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN HF T1 Rail Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.2.2
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN HF TX Rail Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V4.2.2
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN ST Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN ST BA Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN ST BA TX Rail Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Siplus ET 200sp IM 155-6 PN ST TX Rail Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product SIPLUS NET PN/PN Coupler Default
n/a
- Version
  All versions < V4.2.1
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus S7-300 Cpu 314c-2 Pn/dp Default
n/a
- Version
  All versions < V3.3.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus S7-300 Cpu 315-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus S7-300 Cpu 315f-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus S7-300 Cpu 317-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus S7-300 Cpu 317f-2 Pn/dp Default
n/a
- Version
  All versions < V3.2.17
  Status
  affected
  Constraints
  -
Vendor Siemens Product Siplus S7-400 Cpu 414-3 Pn/dp V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3
Vendor Siemens Product Siplus S7-400 Cpu 416-3 Pn/dp V7 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V7.0.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P

n/a

Version	Status	Constraints
All versions < V4.6 Patch 01	affected	-

Siemens

Simatic Cfu PA

n/a

Version	Status	Constraints
0	affected	<V1.2.0

Siemens

Simatic ET 200al IM 157-1 PN

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET 200M (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

Simatic ET 200mp IM 155-5 PN BA

n/a

Version	Status	Constraints
0	affected	<V4.3.0

Siemens

Simatic ET 200mp IM 155-5 PN HF

n/a

Version	Status	Constraints
0	affected	<V4.4.0

Siemens

Simatic ET 200mp IM 155-5 PN ST

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Simatic ET 200s IM 151-8 Pn/dp Cpu

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic ET 200s IM 151-8f Pn/dp Cpu

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic ET 200sp IM 155-6 PN BA

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions < V1.2.1	affected	-

Siemens

Simatic ET 200sp IM 155-6 PN HF

n/a

Version	Status	Constraints
0	affected	<V4.2.2

Siemens

Simatic ET 200sp IM 155-6 PN HS

n/a

Version	Status	Constraints
0	affected	<V4.0.1

Siemens

Simatic ET 200sp IM 155-6 PN ST

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Simatic ET 200sp IM 155-6 PN ST BA

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Simatic ET 200sp IM 155-6 Pn/2 HF

n/a

Version	Status	Constraints
0	affected	<V4.2.2

Siemens

Simatic ET 200sp IM 155-6 Pn/3 HF

n/a

Version	Status	Constraints
0	affected	<V4.2.1

Siemens

SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

n/a

Version	Status	Constraints
0	affected	<V2.0

Siemens

SIMATIC ET 200pro IM 154-3 PN HF

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC ET 200pro IM 154-4 PN HF

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC ET 200pro IM 154-8 PN/DP CPU

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

SIMATIC ET 200pro IM 154-8F PN/DP CPU

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

SIMATIC ET 200pro IM 154-8FX PN/DP CPU

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

SIMATIC ET200S (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 4AO U/I 4xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC ET200ecoPN: IO-Link Master

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC HMI Comfort Panels (incl. SIPLUS variants)

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC HMI KTP Mobile Panels

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC PN/PN Coupler

n/a

Version	Status	Constraints
All versions < V4.2.1	affected	-

Siemens

SIMATIC PROFINET Driver

n/a

Version	Status	Constraints
All versions < V2.1	affected	-

Siemens

SIMATIC S7-1200 CPU family (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions < V4.4.0	affected	-

Siemens

SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

n/a

Version	Status	Constraints
All versions < V2.0	affected	-

Siemens

SIMATIC S7-1500 Software Controller

n/a

Version	Status	Constraints
All versions < V2.0	affected	-

Siemens

Simatic S7-300 Cpu 314c-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 315-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 315f-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 315t-3 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 317-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 317f-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 317t-3 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 317tf-3 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 319-3 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-300 Cpu 319f-3 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Simatic S7-400 Cpu 412-2 PN V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Siemens

Simatic S7-400 Cpu 414-3 Pn/dp V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Siemens

Simatic S7-400 Cpu 414f-3 Pn/dp V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Siemens

Simatic S7-400 Cpu 416-3 Pn/dp V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Siemens

Simatic S7-400 Cpu 416f-3 Pn/dp V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Siemens

SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

n/a

Version	Status	Constraints
0	affected	<V6.0.9

Siemens

SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions < V8.2.2	affected	-

Siemens

Simatic Tdc Cp51m1

n/a

Version	Status	Constraints
0	affected	<V1.1.8

Siemens

Simatic Tdc Cpu555

n/a

Version	Status	Constraints
0	affected	<V1.1.1

Siemens

SIMATIC WinAC RTX 2010

n/a

Version	Status	Constraints
All versions < V2010 SP3	affected	-

Siemens

SIMATIC WinAC RTX F 2010

n/a

Version	Status	Constraints
All versions < V2010 SP3	affected	-

Siemens

Sinamics Dcm

n/a

Version	Status	Constraints
All versions < V1.5 HF1	affected	-

Siemens

Sinamics Dcp

n/a

Version	Status	Constraints
All versions < V1.3	affected	-

Siemens

SINAMICS G110M V4.7 PN Control Unit

n/a

Version	Status	Constraints
All versions < V4.7 SP10 HF5	affected	-

Siemens

SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)

n/a

Version	Status	Constraints
All versions < V4.7 SP10 HF5	affected	-

Siemens

SINAMICS G130 V4.7 Control Unit

n/a

Version	Status	Constraints
All versions < 4.8	affected	-

Siemens

SINAMICS G150 Control Unit

n/a

Version	Status	Constraints
All versions < 4.8	affected	-

Siemens

SINAMICS GH150 V4.7 Control Unit

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SINAMICS GL150 V4.7 Control Unit

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SINAMICS GM150 V4.7 Control Unit

n/a

Version	Status	Constraints
All versions	affected	-

Siemens

SINAMICS S110 Control Unit

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SINAMICS S150 Control Unit

n/a

Version	Status	Constraints
All versions < 4.8	affected	-

Siemens

SINAMICS SL150 V4.7 Control Unit

n/a

Version	Status	Constraints
All versions < V4.7 HF33	affected	-

Siemens

SINAMICS SM120 V4.7 Control Unit

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Sinumerik 828d

n/a

Version	Status	Constraints
All versions < V4.8 SP5	affected	-

Siemens

SINUMERIK 840D sl

n/a

Version	Status	Constraints
All versions < V4.8 SP6	affected	-

Siemens

Siplus ET 200mp IM 155-5 PN HF

n/a

Version	Status	Constraints
0	affected	<V4.4.0

Siemens

Siplus ET 200mp IM 155-5 PN HF T1 Rail

n/a

Version	Status	Constraints
0	affected	<V4.4.0

Siemens

Siplus ET 200mp IM 155-5 PN ST

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Siplus ET 200mp IM 155-5 PN ST TX Rail

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Siplus ET 200s IM 151-8 Pn/dp Cpu

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Siplus ET 200s IM 151-8f Pn/dp Cpu

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Siplus ET 200sp IM 155-6 PN HF

n/a

Version	Status	Constraints
0	affected	<V4.2.2

Siemens

Siplus ET 200sp IM 155-6 PN HF T1 Rail

n/a

Version	Status	Constraints
0	affected	<V4.2.2

Siemens

Siplus ET 200sp IM 155-6 PN HF TX Rail

n/a

Version	Status	Constraints
0	affected	<V4.2.2

Siemens

Siplus ET 200sp IM 155-6 PN ST

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Siplus ET 200sp IM 155-6 PN ST BA

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Siplus ET 200sp IM 155-6 PN ST BA TX Rail

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Siplus ET 200sp IM 155-6 PN ST TX Rail

n/a

Version	Status	Constraints
0	affected	<*

Siemens

SIPLUS NET PN/PN Coupler

n/a

Version	Status	Constraints
All versions < V4.2.1	affected	-

Siemens

Siplus S7-300 Cpu 314c-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.3.17	affected	-

Siemens

Siplus S7-300 Cpu 315-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Siplus S7-300 Cpu 315f-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Siplus S7-300 Cpu 317-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Siplus S7-300 Cpu 317f-2 Pn/dp

n/a

Version	Status	Constraints
All versions < V3.2.17	affected	-

Siemens

Siplus S7-400 Cpu 414-3 Pn/dp V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Siemens

Siplus S7-400 Cpu 416-3 Pn/dp V7

n/a

Version	Status	Constraints
0	affected	<V7.0.3

Vendor Siemens Product DK Standard Ethernet Controller Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product EK-Ertec 200 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product EK-Ertec 200p Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <4.6
Vendor Siemens Product Simatic Cfu PA Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v1.2.0
Vendor Siemens Product Simatic Et200ecopn Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic Et200s Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic ET 200al Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic ET 200m Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic ET 200mp Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.3.0
Vendor Siemens Product Simatic ET 200pro Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic ET 200s Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic ET 200sp Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic Hmi Comfort Outdoor Panels Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic Pn\/pn Coupler 6es7158-3ad01-0xa0 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.2.1
Vendor Siemens Product Simatic Profinet Driver Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v2.1
Vendor Siemens Product Simatic S7-1200 Cpu Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.4.0
Vendor Siemens Product Simatic S7-1500 Controller Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v2.0
Vendor Siemens Product Simatic S7-1500 Cpu Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v2.0
Vendor Siemens Product Simatic S7-300 Cpu 314 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic S7-300 Cpu 315-2 DP Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic S7-300 Cpu 315f-2 DP Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic S7-300 Cpu 317-2 DP Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic S7-300 Cpu 317-2 Pn\/dp Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic S7-300 Cpu 319-3 Pn\/dp Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.2.17
Vendor Siemens Product Simatic S7-400 Cpu 412-2 PN Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v7.0.3
Vendor Siemens Product Simatic S7-400 Cpu 414-3 Pn\/dp Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v7.0.3
Vendor Siemens Product Simatic S7-400 Cpu 416-3 Pn\/dp Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=v7.0.3
Vendor Siemens Product Simatic S7-400 H V6 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=v6.0.9
Vendor Siemens Product Simatic S7-400 Pn\/dp V6 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Simatic S7-410 Cpu Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v8.2.2
Vendor Siemens Product Simatic Tdc Cp51m1 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v1.1.8
Vendor Siemens Product Simatic Tdc Cpu555 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v1.1.1
Vendor Siemens Product Simatic Winac Rtx 2010 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v2010_sp3
Vendor Siemens Product Simatic Winac Rtx \(f\) 2010 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v2010_sp3
Vendor Siemens Product Sinamics Dcm Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v1.5_hf1
Vendor Siemens Product Sinamics Dcp Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v1.3
Vendor Siemens Product Sinamics G110m Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.7_sp10_hf5
Vendor Siemens Product Sinamics G120 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.7_sp10_hf5
Vendor Siemens Product Sinamics G130 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.8
Vendor Siemens Product Sinamics G150 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.8
Vendor Siemens Product Sinamics Gh150 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Sinamics Gl150 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Sinamics Gm150 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <*
Vendor Siemens Product Sinamics S110 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Sinamics S120 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Sinamics Sl150 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.7_hf33
- Version
  0
  Status
  affected
  Constraints
  <v4.8
Vendor Siemens Product Sinamics Sm120 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=*
Vendor Siemens Product Sinumerik 828d Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.8_sp5
Vendor Siemens Product Sinumerik 840d SL Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v4.8_sp6
Vendor Siemens Product Siplus S7-300 Cpu 314 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <v3.3.17

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

DK Standard Ethernet Controller Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

EK-Ertec 200 Firmware

n/a

Version	Status	Constraints
0	affected	<*

Siemens

EK-Ertec 200p Firmware

n/a

Version	Status	Constraints
0	affected	<4.6

Siemens

Simatic Cfu PA

n/a

Version	Status	Constraints
0	affected	<v1.2.0

Siemens

Simatic Et200ecopn Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic Et200s Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic ET 200al Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic ET 200m Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic ET 200mp Firmware

n/a

Version	Status	Constraints
0	affected	<v4.3.0

Siemens

Simatic ET 200pro Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic ET 200s Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic ET 200sp Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic Hmi Comfort Outdoor Panels

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic Pn\/pn Coupler 6es7158-3ad01-0xa0

n/a

Version	Status	Constraints
0	affected	<v4.2.1

Siemens

Simatic Profinet Driver

n/a

Version	Status	Constraints
0	affected	<v2.1

Siemens

Simatic S7-1200 Cpu

n/a

Version	Status	Constraints
0	affected	<v4.4.0

Siemens

Simatic S7-1500 Controller

n/a

Version	Status	Constraints
0	affected	<v2.0

Siemens

Simatic S7-1500 Cpu

n/a

Version	Status	Constraints
0	affected	<v2.0

Siemens

Simatic S7-300 Cpu 314 Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic S7-300 Cpu 315-2 DP Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic S7-300 Cpu 315f-2 DP Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic S7-300 Cpu 317-2 DP Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic S7-300 Cpu 317-2 Pn\/dp Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic S7-300 Cpu 319-3 Pn\/dp Firmware

n/a

Version	Status	Constraints
0	affected	<v3.2.17

Siemens

Simatic S7-400 Cpu 412-2 PN

n/a

Version	Status	Constraints
0	affected	<v7.0.3

Siemens

Simatic S7-400 Cpu 414-3 Pn\/dp

n/a

Version	Status	Constraints
0	affected	<v7.0.3

Siemens

Simatic S7-400 Cpu 416-3 Pn\/dp

n/a

Version	Status	Constraints
0	affected	<=v7.0.3

Siemens

Simatic S7-400 H V6 Firmware

n/a

Version	Status	Constraints
0	affected	<=v6.0.9

Siemens

Simatic S7-400 Pn\/dp V6 Firmware

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Simatic S7-410 Cpu Firmware

n/a

Version	Status	Constraints
0	affected	<v8.2.2

Siemens

Simatic Tdc Cp51m1 Firmware

n/a

Version	Status	Constraints
0	affected	<v1.1.8

Siemens

Simatic Tdc Cpu555 Firmware

n/a

Version	Status	Constraints
0	affected	<v1.1.1

Siemens

Simatic Winac Rtx 2010

n/a

Version	Status	Constraints
0	affected	<v2010_sp3

Siemens

Simatic Winac Rtx \(f\) 2010

n/a

Version	Status	Constraints
0	affected	<v2010_sp3

Siemens

Sinamics Dcm

n/a

Version	Status	Constraints
0	affected	<v1.5_hf1

Siemens

Sinamics Dcp

n/a

Version	Status	Constraints
0	affected	<v1.3

Siemens

Sinamics G110m

n/a

Version	Status	Constraints
0	affected	<v4.7_sp10_hf5

Siemens

Sinamics G120

n/a

Version	Status	Constraints
0	affected	<v4.7_sp10_hf5

Siemens

Sinamics G130

n/a

Version	Status	Constraints
0	affected	<v4.8

Siemens

Sinamics G150

n/a

Version	Status	Constraints
0	affected	<v4.8

Siemens

Sinamics Gh150

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Sinamics Gl150

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Sinamics Gm150

n/a

Version	Status	Constraints
0	affected	<*

Siemens

Sinamics S110

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Sinamics S120

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Sinamics Sl150

n/a

Version	Status	Constraints
0	affected	<v4.7_hf33
0	affected	<v4.8

Siemens

Sinamics Sm120

n/a

Version	Status	Constraints
0	affected	<=*

Siemens

Sinumerik 828d

n/a

Version	Status	Constraints
0	affected	<v4.8_sp5

Siemens

Sinumerik 840d SL

n/a

Version	Status	Constraints
0	affected	<v4.8_sp6

Siemens

Siplus S7-300 Cpu 314

n/a

Version	Status	Constraints
0	affected	<v3.3.17

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (2)

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-473245.html
https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Oct 10, 2019

Updated Aug 4, 2024

Reserved Apr 8, 2019

Link CVE-2019-10936

CISA Vulnrichment

Updated Jul 9, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-10936

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-10936