7.8
CWE
400
Advisory Published
Updated

CVE-2019-13946

First published: Tue Feb 11 2020(Updated: )

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Credit: productcert@siemens.com productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens DK Standard Ethernet Controller Evaluation Kit
Siemens SIMATIC PROFINET Driver<2.1
Siemens Simatic IPC Support
All of
Siemens EK-ERTEC 200 Evaluation Kit Firmware<4.5
Siemens EK-ERTEC 200 Evaluation Kit
All of
Siemens EK-ERTEC 200P PN IO Firmware<4.6
Siemens EK-ERTEC 200P Evaluation Kit
All of
Siemens Ruggedcom RM1224 LTE (4G) NAM<4.3
Siemens Ruggedcom RM1224 LTE(4G) EU
All of
siemens scalance m-800 firmware<4.3
Siemens SCALANCE M-800
All of
Siemens Scalance S615 EEC Firmware<4.3
Siemens SCALANCE S615 firmware
All of
siemens scalance w700 ieee 802.11n firmware<=6.0.1
Siemens SCALANCE W700 IEEE 802.11a/b/g/n
All of
siemens scalance xc-200 firmware
Siemens SCALANCE XC-200
All of
Siemens Scalance XF-200
Siemens Scalance XF-200 Firmware
All of
siemens scalance xp-200 firmware
Siemens SCALANCE XP-200
All of
siemens scalance xb-200 firmware
Siemens SCALANCE XB-200
All of
Siemens Scalance X-200 IRT<5.3
Siemens Scalance X-200 IRT
All of
siemens scalance xr-300wg firmware<3.0
Siemens SCALANCE X-300WG
All of
Siemens Scalance X300 Firmware
Siemens SCALANCE X-300 series firmware
All of
siemens scalance xb-200 firmware<3.0
Siemens SCALANCE XB-200
All of
siemens scalance xc-200 firmware<3.0
Siemens SCALANCE XC-200
All of
siemens scalance xp-200 firmware<3.0
Siemens SCALANCE XP-200
All of
siemens scalance xf-200ba firmware<3.0
Siemens SCALANCE XF-200BA
All of
Siemens Scalance X-400<6.0
Siemens Scalance X-400 Firmware
All of
siemens scalance xm-400 firmware<6.0
siemens scalance xm-400
All of
Siemens Scalance XR524<6.0
Siemens Scalance XR524
All of
Siemens Scalance XR526 Firmware<6.0
Siemens Scalance XR526
All of
Siemens Scalance XR528<6.0
Siemens Scalance XR528 Firmware
All of
Siemens Scalance XR552 Firmware<6.0
Siemens Scalance XR552 Firmware
All of
Siemens Simatic Net CP1616 Firmware<2.8
Siemens Simatic Net CP 1616
All of
Siemens Simatic CP 1604 Firmware
Siemens Simatic CP 1604<2.8
All of
Siemens Simatic CP 343-1
Siemens Simatic CP 343-1 Advanced
All of
Siemens SIMATIC CP 343-1 Advanced
Siemens SIMATIC CP 343-1 Advanced Firmware
All of
Siemens Simatic CP 343-1 ERPC
Siemens SIMATIC CP 343-1 ERPC Firmware
All of
Siemens SIMATIC NET CP 343-1 Lean Firmware
Siemens SIMATIC CP 343-1
All of
Siemens Simatic CP 443-1
Siemens Simatic CP443-1
All of
Siemens Simatic CP 443-1 Advanced
Siemens SIMATIC CP 443-1 Advanced Firmware
All of
Siemens SIMATIC CP 443-1 OPC UA
Siemens SIMATIC CP 443-1 OPC UA Firmware
All of
Siemens Simatic ET200AL IM 157-1 PN
Siemens Simatic ET200AL IM 157-1 PN Firmware
All of
Siemens Simatic ET 200M IM153-4 PN IO HF
Siemens Simatic ET 200M IM153-4 PN IO HF
All of
Siemens SIMATIC ET200M IM153-4 PN IO ST
Siemens SIMATIC ET200M IM153-4 PN IO ST Firmware
All of
Siemens SIMATIC ET200MP IM155-5 PN HF Firmware<4.2.0
Siemens SIMATIC ET200MP IM155-5 PN HF Firmware
All of
Siemens Simatic ET200MP IM155-5 PN ST<4.1.0
Siemens Simatic ET200MP IM155-5 PN ST
All of
siemens simatic et200s firmware
Siemens SIMATIC ET 200S
All of
Siemens SIMATIC ET200SP IM155-6 PN Basic
Siemens SIMATIC ET200SP IM155-6 PN Basic
All of
Siemens SIMATIC ET200SP IM155-6 PN HF Firmware<3.3.1
Siemens SIMATIC ET200SP IM155-6 PN HF Firmware
All of
Siemens Simatic ET200SP IM155-6 PN ST<4.1.0
Siemens Simatic ET200SP IM155-6 PN ST
All of
Siemens SIMATIC ET 200ecoPN Firmware
Siemens SIMATIC ET 200ecoPN
All of
Siemens SIMATIC ET 200pro Firmware
Siemens SIMATIC ET 200pro
All of
Siemens IM 154-3 PN HF
Siemens IM 154-3 PN HF Firmware
All of
Siemens IM 154-4 PN HF
Siemens IM 154-4 PN HF
All of
Siemens Simatic MV440
Siemens Simatic MV440 Firmware
All of
Siemens Simatic MV420
Siemens Simatic MV420 Firmware
All of
Siemens Simatic PN/PN Coupler Firmware
Siemens Simatic PN/PN Coupler
All of
Siemens Simatic RF180C
Siemens Simatic RF180C Firmware
All of
Siemens Simatic RF182C
Siemens Simatic RF182C Firmware
All of
Siemens Simatic RF600 Firmware<3.0
Siemens Simatic RF600
All of
Siemens Sinamics DCP<1.3
Siemens Sinamics DCP Firmware
Siemens EK-ERTEC 200 Evaluation Kit Firmware<4.5
Siemens EK-ERTEC 200 Evaluation Kit
Siemens EK-ERTEC 200P PN IO Firmware<4.6
Siemens EK-ERTEC 200P Evaluation Kit
Siemens Ruggedcom RM1224 LTE (4G) NAM<4.3
Siemens Ruggedcom RM1224 LTE(4G) EU
siemens scalance m-800 firmware<4.3
Siemens SCALANCE M-800
Siemens Scalance S615 EEC Firmware<4.3
Siemens SCALANCE S615 firmware
siemens scalance w700 ieee 802.11n firmware<=6.0.1
Siemens SCALANCE W700 IEEE 802.11a/b/g/n
siemens scalance xc-200 firmware
Siemens SCALANCE XC-200
Siemens Scalance XF-200
Siemens Scalance XF-200 Firmware
siemens scalance xp-200 firmware
Siemens SCALANCE XP-200
siemens scalance xb-200 firmware
Siemens SCALANCE XB-200
Siemens Scalance X-200 IRT<5.3
Siemens Scalance X-200 IRT
siemens scalance xr-300wg firmware<3.0
Siemens SCALANCE X-300WG
Siemens Scalance X300 Firmware
Siemens SCALANCE X-300 series firmware
siemens scalance xb-200 firmware<3.0
siemens scalance xc-200 firmware<3.0
siemens scalance xp-200 firmware<3.0
siemens scalance xf-200ba firmware<3.0
Siemens SCALANCE XF-200BA
Siemens Scalance X-400<6.0
Siemens Scalance X-400 Firmware
siemens scalance xm-400 firmware<6.0
siemens scalance xm-400
Siemens Scalance XR524<6.0
Siemens Scalance XR524
Siemens Scalance XR526 Firmware<6.0
Siemens Scalance XR526
Siemens Scalance XR528<6.0
Siemens Scalance XR528 Firmware
Siemens Scalance XR552 Firmware<6.0
Siemens Scalance XR552 Firmware
Siemens Simatic Net CP1616 Firmware<2.8
Siemens Simatic Net CP 1616
Siemens Simatic CP 1604<2.8
Siemens Simatic CP 1604 Firmware
Siemens Simatic CP 343-1
Siemens Simatic CP 343-1 Advanced
Siemens SIMATIC CP 343-1 Advanced
Siemens SIMATIC CP 343-1 Advanced Firmware
Siemens Simatic CP 343-1 ERPC
Siemens SIMATIC CP 343-1 ERPC Firmware
Siemens SIMATIC NET CP 343-1 Lean Firmware
Siemens SIMATIC CP 343-1
Siemens Simatic CP 443-1
Siemens Simatic CP443-1
Siemens Simatic CP 443-1 Advanced
Siemens SIMATIC CP 443-1 Advanced Firmware
Siemens SIMATIC CP 443-1 OPC UA
Siemens SIMATIC CP 443-1 OPC UA Firmware
Siemens Simatic ET200AL IM 157-1 PN
Siemens Simatic ET200AL IM 157-1 PN Firmware
Siemens Simatic ET 200M IM153-4 PN IO HF
Siemens Simatic ET 200M IM153-4 PN IO HF
Siemens SIMATIC ET200M IM153-4 PN IO ST
Siemens SIMATIC ET200M IM153-4 PN IO ST Firmware
Siemens SIMATIC ET200MP IM155-5 PN HF Firmware<4.2.0
Siemens SIMATIC ET200MP IM155-5 PN HF Firmware
Siemens Simatic ET200MP IM155-5 PN ST<4.1.0
Siemens Simatic ET200MP IM155-5 PN ST
siemens simatic et200s firmware
Siemens SIMATIC ET 200S
Siemens SIMATIC ET200SP IM155-6 PN Basic
Siemens SIMATIC ET200SP IM155-6 PN Basic
Siemens SIMATIC ET200SP IM155-6 PN HF Firmware<3.3.1
Siemens SIMATIC ET200SP IM155-6 PN HF Firmware
Siemens Simatic ET200SP IM155-6 PN ST<4.1.0
Siemens Simatic ET200SP IM155-6 PN ST
Siemens SIMATIC ET 200ecoPN Firmware
Siemens SIMATIC ET 200ecoPN
Siemens SIMATIC ET 200pro Firmware
Siemens SIMATIC ET 200pro
Siemens IM 154-3 PN HF
Siemens IM 154-3 PN HF Firmware
Siemens IM 154-4 PN HF
Siemens IM 154-4 PN HF
Siemens Simatic MV440
Siemens Simatic MV440 Firmware
Siemens Simatic MV420
Siemens Simatic MV420 Firmware
Siemens Simatic PN/PN Coupler Firmware
Siemens Simatic PN/PN Coupler
Siemens Simatic RF180C
Siemens Simatic RF180C Firmware
Siemens Simatic RF182C
Siemens Simatic RF182C Firmware
Siemens Simatic RF600 Firmware<3.0
Siemens Simatic RF600
Siemens Sinamics DCP<1.3
Siemens Sinamics DCP Firmware

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203