high
7.5
CWE
400
Advisory Published
Updated

CVE-2019-10936

First published: Thu Oct 10 2019(Updated: )

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET200AL, SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200M (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants), SIMATIC ET200pro, SIMATIC ET200S (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN BA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels, SIMATIC PN/PN Coupler, SIMATIC PROFINET Driver, SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 PN Control Unit, SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS S150 Control Unit, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS NET PN/PN Coupler, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7. Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Credit: productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens Dk Standard Ethernet Controller Firmware
Siemens Dk Standard Ethernet Controller
Siemens Ek-ertec 200 Firmware
Siemens Ek-ertec 200
Siemens Ek-ertec 200p Firmware<4.6
Siemens Ek-ertec 200p Firmware=4.6
Siemens Ek-ertec 200p
Siemens Simatic Cfu Pa Firmware<1.2.0
Siemens Simatic Cfu Pa
Siemens Simatic Et 200al Firmware
Siemens Simatic Et 200al
Siemens Simatic Et 200m Firmware
Siemens Simatic Et 200m
Siemens Simatic Et 200mp Im 155-5 Pn Ba Firmware<4.3.0
Siemens Simatic Et 200mp Im 155-5 Pn Ba
Siemens Simatic Et 200mp Im 155-5 Pn Hf Firmware<4.4.0
Siemens Simatic Et 200mp Im 155-5 Pn Hf
Siemens Simatic Et 200mp Im 155-5 Pn St Firmware
Siemens Simatic Et 200mp Im 155-5 Pn St
Siemens Simatic Et 200s Firmware
Siemens Simatic Et 200s
Siemens Simatic Et 200sp Im 155-6 Pn Ba Firmware
Siemens Simatic Et 200sp Im 155-6 Pn Ba
Siemens Simatic Et 200sp Im 155-6 Pn Ha Firmware
Siemens Simatic Et 200sp Im 155-6 Pn Ha
Siemens Simatic Et 200sp Im 155-6 Pn Hf Firmware<4.2.2
Siemens Simatic Et 200sp Im 155-6 Pn Hf
Siemens Simatic Et 200sp Im 155-6 Pn Hs Firmware
Siemens Simatic Et 200sp Im 155-6 Pn Hs
Siemens Simatic Et 200sp Im 155-6 Pn St Firmware
Siemens Simatic Et 200sp Im 155-6 Pn St
Siemens Simatic Et 200sp Im 155-6 Pn\/2 Hf Firmware<4.2.2
Siemens Simatic Et 200sp Im 155-6 Pn\/2 Hf
Siemens Simatic Et 200sp Im 155-6 Pn\/3 Hf Firmware<4.2.1
Siemens Simatic Et 200sp Im 155-6 Pn\/3 Hf
Siemens Simatic Et 200ecopn Firmware
Siemens Simatic Et 200ecopn
Siemens Simatic Et 200pro Firmware
Siemens Simatic Et 200pro
Siemens Simatic Hmi Comfort Outdoor Panels 7\" Firmware
Siemens Simatic Hmi Comfort Outdoor Panels 7\"
Siemens Simatic Hmi Comfort Outdoor Panels 15\" Firmware
Siemens Simatic Hmi Comfort Outdoor Panels 15\"
Siemens Simatic Hmi Comfort Panels 4\" Firmware
Siemens Simatic Hmi Comfort Panels 4\"
Siemens Simatic Hmi Comfort Panels 22\" Firmware
Siemens Simatic Hmi Comfort Panels 22\"
Siemens Simatic Hmi Ktp Mobile Panels Firmware
Siemens Simatic Hmi Ktp Mobile Panels
Siemens Simatic Pn\/pn Coupler Firmware<4.2.1
Siemens Simatic Pn\/pn Coupler
Siemens Simatic Profinet Driver Firmware<2.1
Siemens Simatic Profinet Driver
Siemens Simatic S7-1200 Cpu Firmware<4.4.0
Siemens Simatic S7-1200 Cpu
Siemens Simatic S7-1200 Cpu 1211c Firmware<4.4.0
Siemens Simatic S7-1200 Cpu 1211c
Siemens Simatic S7-1200 Cpu 1212c Firmware<4.4.0
Siemens Simatic S7-1200 Cpu 1212c
Siemens Simatic S7-1200 Cpu 1214c Firmware<4.4.0
Siemens Simatic S7-1200 Cpu 1214c
Siemens Simatic S7-1500 Cpu Firmware<2.0
Siemens Simatic S7-1500 Cpu
Siemens Simatic S7-1500s Cpu Firmware<2.0
Siemens Simatic S7-1500s Cpu
Siemens Simatic S7-1500t Cpu Firmware<2.0
Siemens Simatic S7-1500t Cpu
Siemens Simatic S7-1500 Cpu 1518 Firmware<2.0
Siemens Simatic S7-1500 Cpu 1518
Siemens Simatic S7-1500 Cpu 1511c Firmware<2.0
Siemens Simatic S7-1500 Cpu 1511c
Siemens Simatic S7-1500 Cpu 1512c Firmware<2.0
Siemens Simatic S7-1500 Cpu 1512c
Siemens Simatic S7-300 Cpu Firmware<3.3.17
Siemens SIMATIC S7-300 CPU
Siemens Simatic S7-300 Cpu 312 Ifm Firmware<3.3.17
Siemens Simatic S7-300 Cpu 312 Ifm
Siemens Simatic S7-300 Cpu 313 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 313
Siemens Simatic S7-300 Cpu 314 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 314
Siemens Simatic S7-300 Cpu 314 Ifm Firmware<3.3.17
Siemens Simatic S7-300 Cpu 314 Ifm
Siemens Simatic S7-300 Cpu 315 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 315
Siemens Simatic S7-300 Cpu 315-2 Dp Firmware<3.3.17
Siemens Simatic S7-300 Cpu 315-2 Dp
Siemens Simatic S7-300 Cpu 316-2 Dp Firmware<3.3.17
Siemens Simatic S7-300 Cpu 316-2 Dp
Siemens Simatic S7-300 Cpu 318-2 Firmware<3.3.17
Siemens Simatic S7-300 Cpu 318-2
Siemens Simatic S7-400 Pn V7 Firmware
Siemens Simatic S7-400 Pn V7
Siemens Simatic S7-400 Dp V7 Firmware
Siemens Simatic S7-400 Dp V7
Siemens Simatic S7-400 V6 Firmware<6.0.9
Siemens Simatic S7-400 V6
Siemens Simatic S7-400h V6 Firmware<6.0.9
Siemens Simatic S7-400h V6
Siemens Simatic S7-410 V8 Firmware<8.2.2
Siemens Simatic S7-410 V8
Siemens Simatic Winac Rtx \(f\) Firmware<2010
Siemens Simatic Winac Rtx \(f\) Firmware=2010
Siemens Simatic Winac Rtx \(f\) 2010
Siemens Sinamics Dcm Firmware<1.5
Siemens Sinamics Dcm Firmware=1.5
Siemens Sinamics Dcm
Siemens Sinamics Dcp Firmware<1.3
Siemens Sinamics Dcp
Siemens Sinamics G110m Firmware<4.7
Siemens Sinamics G110m Firmware=4.7
Siemens Sinamics G110m
Siemens Sinamics G120 Firmware<4.7
Siemens Sinamics G120 Firmware=4.7
Siemens Sinamics G120
Siemens Sinamics G130 Firmware<5.2
Siemens Sinamics G130 Firmware=5.2
Siemens Sinamics G130
Siemens Sinamics G150 Firmware<5.2
Siemens Sinamics G150 Firmware=5.2
Siemens Sinamics G150
Siemens Sinamics Gl150 Firmware<4.8
Siemens Sinamics Gl150 Firmware=4.8
Siemens Sinamics Gl150
Siemens Sinamics Gm150 Firmware<4.8
Siemens Sinamics Gm150 Firmware=4.8
Siemens Sinamics Gm150
Siemens Sinamics S110 Firmware
Siemens Sinamics S110
Siemens Sinamics S120 Firmware<5.2
Siemens Sinamics S120 Firmware=5.2
Siemens Sinamics S120
Siemens Sinamics S150 Firmware<5.2
Siemens Sinamics S150 Firmware=5.2
Siemens Sinamics S150
Siemens Sinamics Sl150 Firmware<4.7
Siemens Sinamics Sl150 Firmware=4.7
Siemens Sinamics Sl150
Siemens Sinamics Sm120 Firmware
Siemens Sinamics Sm120
Siemens Sinumerik 828d<4.8
Siemens Sinumerik 828d=4.8
Siemens Sinumerik 828d=4.8-sp1
Siemens Sinumerik 828d=4.8-sp2
Siemens Sinumerik 828d=4.8-sp3
Siemens Sinumerik 828d=4.8-sp4
Siemens Sinumerik 840d Sl

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-10936?

    The severity of CVE-2019-10936 is 7.5 (High).

  • How do I fix CVE-2019-10936?

    To fix CVE-2019-10936, follow the recommendations provided by the vendor in the reference link.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203