high
7.5
CWE
400
Advisory Published
Updated

CVE-2019-10923

First published: Thu Oct 10 2019(Updated: )

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SCALANCE X-200IRT switch family (incl. SIPLUS NET variants), SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200M (incl. SIPLUS variants), SIMATIC ET200pro, SIMATIC ET200S (incl. SIPLUS variants), SIMATIC NET CP 1604, SIMATIC NET CP 1616, SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SIMOTION, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 Control Unit, SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants), SINAMICS S150 Control Unit, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7. An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.

Credit: productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens Cp1604 Firmware<2.8
Siemens Cp1604
Siemens Cp1616 Firmware<2.8
Siemens Cp1616
Siemens Dk Standard Ethernet Controller Firmware<4.1.1
Siemens Dk Standard Ethernet Controller Firmware=4.1.1
Siemens Dk Standard Ethernet Controller Firmware=4.1.1-p4
Siemens Dk Standard Ethernet Controller
Siemens Ek-ertec 200 Firmware<4.5.0
Siemens Ek-ertec 200 Firmware=4.5.0
Siemens Ek-ertec 200
Siemens Ek-ertec 200p Firmware<4.5.0
Siemens Ek-ertec 200p
Siemens Scalance X-200irt Firmware<5.2.1
Siemens Scalance X-200irt
Siemens Simatic Et 200m Firmware
Siemens Simatic Et 200m
Siemens Simatic Et 200s Firmware
Siemens Simatic Et 200s
Siemens Simatic Et 200ecopn Firmware
Siemens Simatic Et 200ecopn
Siemens Simatic Pn\/pn Coupler 6es7158-3ad01-0xa0 Firmware
Siemens Simatic Pn\/pn Coupler 6es7158-3ad01-0xa0
Siemens Simatic S7-300 Cpu Firmware<3.3.17
Siemens SIMATIC S7-300 CPU
Siemens Simatic S7-300 Cpu 312 Ifm Firmware<3.3.17
Siemens Simatic S7-300 Cpu 312 Ifm
Siemens Simatic S7-300 Cpu 313 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 313
Siemens Simatic S7-300 Cpu 314 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 314
Siemens Simatic S7-300 Cpu 314 Ifm Firmware<3.3.17
Siemens Simatic S7-300 Cpu 314 Ifm
Siemens Simatic S7-300 Cpu 315 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 315
Siemens Simatic S7-300 Cpu 315-2 Dp Firmware<3.3.17
Siemens Simatic S7-300 Cpu 315-2 Dp
Siemens Simatic S7-300 Cpu 316-2 Dp Firmware<3.3.17
Siemens Simatic S7-300 Cpu 316-2 Dp
Siemens Simatic S7-300 Cpu 318-2 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 318-2
Siemens Simatic S7-400 V6 Firmware
Siemens Simatic S7-400 V6
Siemens Simatic S7-400 Pn V7 Firmware
Siemens Simatic S7-400 Pn V7
Siemens Simatic S7-400 Dp V7 Firmware
Siemens Simatic S7-400 Dp V7
Siemens Simatic Winac Rtx \(f\) Firmware<2010
Siemens Simatic Winac Rtx \(f\) Firmware=2010
Siemens Simatic Winac Rtx \(f\) Firmware=2010-sp1
Siemens Simatic Winac Rtx \(f\) Firmware=2010-sp2
Siemens Simatic Winac Rtx \(f\)
Siemens Simotion Firmware
Siemens Simotion
Siemens Sinamics Dcm Firmware<1.5
Siemens Sinamics Dcm Firmware=1.5
Siemens Sinamics Dcm
Siemens Sinamics Dcp Firmware<1.3
Siemens Sinamics Dcp
Siemens Sinamics G110m Firmware<4.7
Siemens Sinamics G110m Firmware=4.7
Siemens Sinamics G110m
Siemens Sinamics G120 Firmware<4.7
Siemens Sinamics G120 Firmware=4.7
Siemens Sinamics G120
Siemens Sinamics G130 Firmware<4.7
Siemens Sinamics G130 Firmware=4.7
Siemens Sinamics G130
Siemens Sinamics G150 Firmware<4.8
Siemens Sinamics G150
Siemens Sinamics Gh150 Firmware<4.8
Siemens Sinamics Gh150 Firmware=4.8
Siemens Sinamics Gh150
Siemens Sinamics Gl150 Firmware<4.8
Siemens Sinamics Gl150 Firmware=4.8
Siemens Sinamics Gl150
Siemens Sinamics Gm150 Firmware<4.8
Siemens Sinamics Gm150 Firmware=4.8
Siemens Sinamics Gm150
Siemens Sinamics S110 Firmware
Siemens Sinamics S110
Siemens Sinamics S120 Firmware<4.7
Siemens Sinamics S120 Firmware=4.7
Siemens Sinamics S120
Siemens Sinamics S150 Firmware<4.8
Siemens Sinamics S150
Siemens Sinamics Sl150 Firmware<4.7
Siemens Sinamics Sl150 Firmware=4.7
Siemens Sinamics Sl150
Siemens Sinamics Sm120 Firmware
Siemens Sinamics Sm120
Siemens Sinumerik 828d<4.8
Siemens Sinumerik 828d=4.8
Siemens Sinumerik 828d=4.8-sp1
Siemens Sinumerik 828d=4.8-sp2
Siemens Sinumerik 828d=4.8-sp3
Siemens Sinumerik 828d=4.8-sp4
Siemens Sinumerik 840d Sl

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203