CVE-2019-19281: High severity siemens simatic et 200sp open controller 1515sp pc2 vulnerability
A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19281?
CVE-2019-19281 is a vulnerability identified in Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 and SIMATIC S7-1500 CPU family.
What is the severity of CVE-2019-19281?
The severity of CVE-2019-19281 is high with a CVSS score of 7.5.
Which software versions are affected by CVE-2019-19281?
All versions >= V2.5 and < V20.8 of Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 and SIMATIC S7-1500 CPU family are affected.
How can I fix CVE-2019-19281?
To fix CVE-2019-19281, update the affected software versions to V20.8 or higher.
Where can I find more information about CVE-2019-19281?
You can find more information about CVE-2019-19281 in the Siemens ProductCERT Advisory and the US-CERT Advisory.