CVE-2019-19300 - Vulnerability Details

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S/G Control Unit w. PROFINET, SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0), SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00536.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Siemens

Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

KTK ATE530S

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIDOOR ATD430W

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIDOOR ATE530S COATED

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIDOOR ATE531S

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200AL IM 157-1 PN

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, DI 16x24VDC, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, DI 8x24VDC, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.3

Siemens

SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L

unknown

Version	Status	Constraints
`V5.1.1`	affected	< V5.1.2

Siemens

SIMATIC ET 200MP IM 155-5 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIMATIC ET 200pro IM 154-8 PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200pro IM 154-8F PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200pro IM 154-8FX PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200S IM 151-8 PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200S IM 151-8F PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200SP IM 155-6 MF HF

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC ET 200SP IM 155-6 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIMATIC ET 200SP IM 155-6 PN/2 HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIMATIC ET 200SP IM 155-6 PN/3 HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< V2.0

Siemens

SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< V2.0

Siemens

SIMATIC MICRO-DRIVE PDC

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC PN/MF Coupler

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC PN/PN Coupler

unknown

Version	Status	Constraints
`All versions >= V4.2`	affected	—

Siemens

SIMATIC S7-1200 CPU family (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`All versions < V4.4.0`	affected	—

Siemens

SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants)

unknown

Version	Status	Constraints
`All versions < V2.0`	affected	—

Siemens

SIMATIC S7-1500 Software Controller

unknown

Version	Status	Constraints
`All versions < V2.0`	affected	—

Siemens

SIMATIC S7-300 CPU 314C-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 315-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 315F-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 315T-3 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 317-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 317F-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 317T-3 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 317TF-3 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 319-3 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-300 CPU 319F-3 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< V10.2

Siemens

SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

unknown

Version	Status	Constraints
`0`	affected	< V8.3

Siemens

SIMATIC TDC CP51M1

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC TDC CPU555

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC WinAC RTX 2010

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIMATIC WinAC RTX F 2010

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SINAMICS S/G Control Unit w. PROFINET

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS ET 200MP IM 155-5 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200MP IM 155-5 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200S IM 151-8 PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS ET 200S IM 151-8F PN/DP CPU

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS ET 200SP IM 155-6 PN HF TX RAIL

unknown

Version	Status	Constraints
`V4.2.0`	affected	< *

Siemens

SIPLUS NET PN/PN Coupler

unknown

Version	Status	Constraints
`All versions >= V4.2`	affected	—

Siemens

SIPLUS S7-300 CPU 314C-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS S7-300 CPU 315-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS S7-300 CPU 315F-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS S7-300 CPU 317-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

SIPLUS S7-300 CPU 317F-2 PN/DP

unknown

Version	Status	Constraints
`0`	affected	< *

Configuration 1 [-]

AND

cpe:2.3:o:siemens:ktk_ate530s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ktk_ate530s:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:siemens:sidoor_atd430w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:sidoor_atd430w:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:siemens:sidoor_ate530s_coated_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:sidoor_ate530s_coated:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:siemens:sidoor_ate531s_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:sidoor_ate531s:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:siemens:simatic_et200mp_im155-5_pn_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200mp_im155-5_pn_hf:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_mf_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_mf_hf:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_ha_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_ha:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn_hf:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn\/2_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn\/2_hf:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:siemens:simatic_et200sp_im155-6_pn\/2_hf_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_et200sp_im155-6_pn\/2_hf:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:siemens:simatic_micro-drive_pdc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_micro-drive_pdc:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:siemens:simatic_pn\/pn_coupler_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_pn\/pn_coupler:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1_pn:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1_pn:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2_pn:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_pn\/dp:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_pn\/dp:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511f-1_pn:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1_pn:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_pn_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2_pn:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3_pn\/dp:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3_pn\/dp:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp:-:*:*:*:*:*:*:*

Configuration 27 [-]

cpe:2.3:a:siemens:simatic_s7-1500:*:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

cpe:2.3:o:siemens:simatic_s7-400_pn\/dp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-400_pn\/dp:v7:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:siemens:simatic_s7-410_cpu_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-410_cpu:-:*:*:*:*:*:*:*

Configuration 31 [-]

AND

cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_2010_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_winac_rtx_\(f\)_2010:-:*:*:*:*:*:*:*

Configuration 34 [-]

AND

cpe:2.3:o:siemens:sinamics_s\/g_control_unit_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:sinamics_s\/g_control_unit:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Siemens Subscribe	Ktk Ate530s Subscribe Ktk Ate530s Firmware Subscribe Sidoor Atd430w Subscribe Sidoor Atd430w Firmware Subscribe Sidoor Ate530s Coated Subscribe Sidoor Ate530s Coated Firmware Subscribe Sidoor Ate531s Subscribe Sidoor Ate531s Firmware Subscribe Simatic Et200mp Im155-5 Pn Hf Subscribe Simatic Et200mp Im155-5 Pn Hf Firmware Subscribe Simatic Et200sp Im155-6 Mf Hf Subscribe Simatic Et200sp Im155-6 Mf Hf Firmware Subscribe Simatic Et200sp Im155-6 Pn\/2 Hf Subscribe Simatic Et200sp Im155-6 Pn\/2 Hf Firmware Subscribe Simatic Et200sp Im155-6 Pn Ha Subscribe Simatic Et200sp Im155-6 Pn Ha Firmware Subscribe Simatic Et200sp Im155-6 Pn Hf Subscribe Simatic Et200sp Im155-6 Pn Hf Firmware Subscribe Simatic Et 200sp Open Controller Cpu 1515sp Pc Subscribe Simatic Et 200sp Open Controller Cpu 1515sp Pc2 Subscribe Simatic Et 200sp Open Controller Cpu 1515sp Pc2 Firmware Subscribe Simatic Et 200sp Open Controller Cpu 1515sp Pc Firmware Subscribe Simatic Micro-drive Pdc Subscribe Simatic Micro-drive Pdc Firmware Subscribe Simatic Pn\/pn Coupler Subscribe Simatic Pn\/pn Coupler Firmware Subscribe Simatic S7-1500 Subscribe Simatic S7-1500 Cpu 1511-1 Pn Subscribe Simatic S7-1500 Cpu 1511-1 Pn Firmware Subscribe Simatic S7-1500 Cpu 1511f-1 Pn Subscribe Simatic S7-1500 Cpu 1511f-1 Pn Firmware Subscribe Simatic S7-1500 Cpu 1513-1 Pn Subscribe Simatic S7-1500 Cpu 1513-1 Pn Firmware Subscribe Simatic S7-1500 Cpu 1513f-1 Pn Subscribe Simatic S7-1500 Cpu 1513f-1 Pn Firmware Subscribe Simatic S7-1500 Cpu 1515-2 Pn Subscribe Simatic S7-1500 Cpu 1515-2 Pn Firmware Subscribe Simatic S7-1500 Cpu 1515f-2 Pn Subscribe Simatic S7-1500 Cpu 1515f-2 Pn Firmware Subscribe Simatic S7-1500 Cpu 1516-3 Pn\/dp Subscribe Simatic S7-1500 Cpu 1516-3 Pn\/dp Firmware Subscribe Simatic S7-1500 Cpu 1516f-3 Pn\/dp Subscribe Simatic S7-1500 Cpu 1516f-3 Pn\/dp Firmware Subscribe Simatic S7-1500 Cpu 1517-3 Pn\/dp Subscribe Simatic S7-1500 Cpu 1517-3 Pn\/dp Firmware Subscribe Simatic S7-1500 Cpu 1517f-3 Pn\/dp Subscribe Simatic S7-1500 Cpu 1517f-3 Pn\/dp Firmware Subscribe Simatic S7-1500 Cpu 1518-4 Pn\/dp Subscribe Simatic S7-1500 Cpu 1518-4 Pn\/dp Firmware Subscribe Simatic S7-1500 Cpu 1518f-4 Pn\/dp Subscribe Simatic S7-1500 Cpu 1518f-4 Pn\/dp Firmware Subscribe Simatic S7-300 Cpu Subscribe Simatic S7-300 Cpu Firmware Subscribe Simatic S7-400 Pn\/dp Subscribe Simatic S7-400 Pn\/dp Firmware Subscribe Simatic S7-410 Cpu Subscribe Simatic S7-410 Cpu Firmware Subscribe Simatic Tdc Cp51m1 Subscribe Simatic Tdc Cp51m1 Firmware Subscribe Simatic Tdc Cpu555 Subscribe Simatic Tdc Cpu555 Firmware Subscribe Simatic Winac Rtx \(f\) 2010 Subscribe Simatic Winac Rtx \(f\) 2010 Firmware Subscribe Sinamics S\/g Control Unit Subscribe Sinamics S\/g Control Unit Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2019-8924	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S/G Control Unit w. PROFINET, SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0), SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://cert-portal.siemens.com/productcert/html/ssa-593272.html
https://cert-portal.siemens.com/productcert/pdf/ssa-593272.pdf

History

Tue, 08 Jul 2025 10:45:00 +0000

Type	Values Removed	Values Added
Description	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S/G Control Unit w. PROFINET, SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0), SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0), SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0), SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0), SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0), SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0), SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0), SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0), SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0), SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0), SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0), SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0), SINAMICS S/G Control Unit w. PROFINET, SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0), SIPLUS ET 200S IM 151-8 PN/DP CPU (6AG1151-8AB01-7AB0), SIPLUS ET 200S IM 151-8F PN/DP CPU (6AG1151-8FB01-2AB0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU00-4CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU00-1CN0), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0), SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0), SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0), SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0), SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0), SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2020-04-14T00:00:00

Updated: 2025-07-08T10:32:10.489Z

Reserved: 2019-11-26T00:00:00

Link: CVE-2019-19300

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-04-14T20:15:14.903

Modified: 2025-07-08T11:15:22.140

Link: CVE-2019-19300

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-400

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object