CVE-2019-13946 - Vulnerability Details

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit
internal resource allocation when multiple legitimate diagnostic package
requests are sent to the DCE-RPC interface.
This could lead to a denial of service condition due to lack of memory
for devices that include a vulnerable version of the stack.

The security vulnerability could be exploited by an attacker with network
access to an affected device. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise the availability of the device.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00552.

Key SSVC decision points have not yet been added.

Vendors	Products
Siemens Subscribe	Dk Standard Ethernet Controller Subscribe Ek-ertec 200 Subscribe Ek-ertec 200 Firmware Subscribe Ek-ertec 200p Subscribe Ek-ertec 200p Firmware Subscribe Im 154-3 Pn Hf Subscribe Im 154-3 Pn Hf Firmware Subscribe Im 154-4 Pn Hf Subscribe Im 154-4 Pn Hf Firmware Subscribe Profinet Driver Subscribe Ruggedcom Rm1224 Subscribe Ruggedcom Rm1224 Firmware Subscribe Scalance M-800 Subscribe Scalance M-800 Firmware Subscribe Scalance S615 Subscribe Scalance S615 Firmware Subscribe Scalance W700 Ieee 802.11n Subscribe Scalance W700 Ieee 802.11n Firmware Subscribe Scalance X-200irt Subscribe Scalance X-200irt Firmware Subscribe Scalance X-300 Subscribe Scalance X-300 Firmware Subscribe Scalance X-400 Subscribe Scalance X-400 Firmware Subscribe Scalance Xb-200 Subscribe Scalance Xb-200 Firmware Subscribe Scalance Xc-200 Subscribe Scalance Xc-200 Firmware Subscribe Scalance Xf-200 Subscribe Scalance Xf-200 Firmware Subscribe Scalance Xf-200ba Subscribe Scalance Xf-200ba Firmware Subscribe Scalance Xm-400 Subscribe Scalance Xm-400 Firmware Subscribe Scalance Xp-200 Subscribe Scalance Xp-200 Firmware Subscribe Scalance Xr-300wg Subscribe Scalance Xr-300wg Firmware Subscribe Scalance Xr524 Subscribe Scalance Xr524 Firmware Subscribe Scalance Xr526 Subscribe Scalance Xr526 Firmware Subscribe Scalance Xr528 Subscribe Scalance Xr528 Firmware Subscribe Scalance Xr552 Subscribe Scalance Xr552 Firmware Subscribe Simatic Cp 1604 Subscribe Simatic Cp 1604 Firmware Subscribe Simatic Cp 1616 Subscribe Simatic Cp 1616 Firmware Subscribe Simatic Cp 343-1 Subscribe Simatic Cp 343-1 Advanced Subscribe Simatic Cp 343-1 Advanced Firmware Subscribe Simatic Cp 343-1 Erpc Subscribe Simatic Cp 343-1 Erpc Firmware Subscribe Simatic Cp 343-1 Firmware Subscribe Simatic Cp 343-1 Lean Subscribe Simatic Cp 343-1 Lean Firmware Subscribe Simatic Cp 443-1 Subscribe Simatic Cp 443-1 Advanced Subscribe Simatic Cp 443-1 Advanced Firmware Subscribe Simatic Cp 443-1 Firmware Subscribe Simatic Cp 443-1 Opc Ua Subscribe Simatic Cp 443-1 Opc Ua Firmware Subscribe Simatic Et200al Im 157-1 Pn Subscribe Simatic Et200al Im 157-1 Pn Firmware Subscribe Simatic Et200ecopn Subscribe Simatic Et200ecopn Firmware Subscribe Simatic Et200m Im153-4 Pn Io Hf Subscribe Simatic Et200m Im153-4 Pn Io Hf Firmware Subscribe Simatic Et200m Im153-4 Pn Io St Subscribe Simatic Et200m Im153-4 Pn Io St Firmware Subscribe Simatic Et200mp Im155-5 Pn Hf Subscribe Simatic Et200mp Im155-5 Pn Hf Firmware Subscribe Simatic Et200mp Im155-5 Pn St Subscribe Simatic Et200mp Im155-5 Pn St Firmware Subscribe Simatic Et200pro Subscribe Simatic Et200pro Firmware Subscribe Simatic Et200s Subscribe Simatic Et200s Firmware Subscribe Simatic Et200sp Im155-6 Pn Basic Subscribe Simatic Et200sp Im155-6 Pn Basic Firmware Subscribe Simatic Et200sp Im155-6 Pn Hf Subscribe Simatic Et200sp Im155-6 Pn Hf Firmware Subscribe Simatic Et200sp Im155-6 Pn St Subscribe Simatic Et200sp Im155-6 Pn St Firmware Subscribe Simatic Ipc Support Subscribe Simatic Mv420 Subscribe Simatic Mv420 Firmware Subscribe Simatic Mv440 Subscribe Simatic Mv440 Firmware Subscribe Simatic Pn\/pn Coupler Subscribe Simatic Pn\/pn Coupler Firmware Subscribe Simatic Rf180c Subscribe Simatic Rf180c Firmware Subscribe Simatic Rf182c Subscribe Simatic Rf182c Firmware Subscribe Simatic Rf600 Subscribe Simatic Rf600 Firmware Subscribe Sinamics Dcp Subscribe Sinamics Dcp Firmware Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:siemens:dk_standard_ethernet_controller::::::::
	cpe:2.3:a:siemens:profinet_driver::::::::
	cpe:2.3:a:siemens:simatic_ipc_support::::::::

Configuration 2 [-]

AND

cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ek-ertec_200:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_w700_ieee_802.11n:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:siemens:scalance_xf-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xf-200:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:siemens:scalance_x-300_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_x-300:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:siemens:scalance_x-400_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_x-400:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:siemens:scalance_xr524_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr524:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:siemens:scalance_xr526_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr526:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:siemens:scalance_xr528_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr528:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:siemens:scalance_xr552_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:scalance_xr552:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:siemens:simatic_cp_343-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_343-1:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:siemens:simatic_cp_343-1_advanced_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_343-1_advanced:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:siemens:simatic_cp_343-1_erpc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_343-1_erpc:-:*:*:*:*:*:*:*

Configuration 31 [-]

AND

cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:*

Configuration 34 [-]

AND

cpe:2.3:o:siemens:simatic_cp_443-1_opc_ua_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_443-1_opc_ua:-:*:*:*:*:*:*:*

Configuration 35 [-]

AND

cpe:2.3:o:siemens:simatic_et200al_im_157-1_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200al_im_157-1_pn:-:*:*:*:*:*:*:*

Configuration 36 [-]

AND

cpe:2.3:o:siemens:simatic_et200m_im153-4_pn_io_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200m_im153-4_pn_io_hf:-:*:*:*:*:*:*:*

Configuration 37 [-]

AND

cpe:2.3:o:siemens:simatic_et200m_im153-4_pn_io_st_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200m_im153-4_pn_io_st:-:*:*:*:*:*:*:*

Configuration 38 [-]

AND

cpe:2.3:o:siemens:simatic_et200mp_im155-5_pn_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200mp_im155-5_pn_hf:-:*:*:*:*:*:*:*

Configuration 39 [-]

AND

cpe:2.3:o:siemens:simatic_et200mp_im155-5_pn_st_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200mp_im155-5_pn_st:-:*:*:*:*:*:*:*

Configuration 40 [-]

AND

cpe:2.3:o:siemens:simatic_et200s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200s:-:*:*:*:*:*:*:*

Configuration 41 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_basic_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_basic:-:*:*:*:*:*:*:*

Configuration 42 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_hf:-:*:*:*:*:*:*:*

Configuration 43 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_st_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_st:-:*:*:*:*:*:*:*

Configuration 44 [-]

AND

cpe:2.3:o:siemens:simatic_et200ecopn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200ecopn:-:*:*:*:*:*:*:*

Configuration 45 [-]

AND

cpe:2.3:o:siemens:simatic_et200pro_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200pro:-:*:*:*:*:*:*:*

Configuration 46 [-]

AND

cpe:2.3:o:siemens:im_154-3_pn_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:im_154-3_pn_hf:-:*:*:*:*:*:*:*

Configuration 47 [-]

AND

cpe:2.3:o:siemens:im_154-4_pn_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:im_154-4_pn_hf:-:*:*:*:*:*:*:*

Configuration 48 [-]

AND

cpe:2.3:o:siemens:simatic_mv440_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_mv440:-:*:*:*:*:*:*:*

Configuration 49 [-]

AND

cpe:2.3:o:siemens:simatic_mv420_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_mv420:-:*:*:*:*:*:*:*

Configuration 50 [-]

AND

cpe:2.3:o:siemens:simatic_pn\/pn_coupler_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pn\/pn_coupler:-:*:*:*:*:*:*:*

Configuration 51 [-]

AND

cpe:2.3:o:siemens:simatic_rf180c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_rf180c:-:*:*:*:*:*:*:*

Configuration 52 [-]

AND

cpe:2.3:o:siemens:simatic_rf182c_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_rf182c:-:*:*:*:*:*:*:*

Configuration 53 [-]

AND

cpe:2.3:o:siemens:simatic_rf600_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_rf600:-:*:*:*:*:*:*:*

Configuration 54 [-]

AND

cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:*

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2019-5213	Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://cert-portal.siemens.com/productcert/html/ssa-780073.html
https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2020-02-11T15:36:10

Updated: 2024-08-05T00:05:44.023Z

Reserved: 2019-07-18T00:00:00

Link: CVE-2019-13946

Vulnrichment

Updated: 2024-08-05T00:05:44.023Z

NVD

Status : Modified

Published: 2020-02-11T16:15:15.023

Modified: 2024-11-21T04:25:45.080

Link: CVE-2019-13946

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-400

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

Projects

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

Projects

JSON object

JSON object

JSON object

JSON object

JSON object