CVE-2019-19300

First published: Tue Apr 14 2020(Updated: )

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions), KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S (All versions), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET200AL IM157-1 PN (All versions), SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 MF HF (All versions), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC MICRO-DRIVE PDC (All versions), SIMATIC PN/MF Coupler (All versions), SIMATIC PN/PN Coupler (All versions >= V4.2), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0), SIMATIC S7-1500 Software Controller (All versions < V2.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions), SIMATIC S7-300 CPU 315-2 PN/DP (All versions), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions), SIMATIC S7-300 CPU 317-2 PN/DP (All versions), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions), SIMATIC S7-300 CPU 319-3 PN/DP (All versions), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions), SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions), SIMATIC TDC CP51M1 (All versions), SIMATIC TDC CPU555 (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SINAMICS S/G Control Unit w. PROFINET (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions), SIPLUS NET PN/PN Coupler (All versions >= V4.2), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions), SIPLUS S7-300 CPU 315-2 PN/DP (All versions), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions), SIPLUS S7-300 CPU 317-2 PN/DP (All versions), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Credit: productcert@siemens.com productcert@siemens.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/weakness
• agent/author
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/references
• agent/severity
• agent/last-modified-date
• agent/description
• agent/first-publish-date
• agent/tags
• agent/event
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• vendor/siemens
• canonical/siemens ktk ate530s firmware
• canonical/siemens ktk ate530s
• canonical/siemens sidoor atd430w firmware
• canonical/siemens sidoor atd430w
• canonical/siemens sidoor ate530s coated firmware
• canonical/siemens sidoor ate530s coated
• canonical/siemens sidoor ate531s firmware
• canonical/siemens sidoor ate531s
• canonical/siemens simatic et 200sp open controller cpu 1515sp pc firmware
• canonical/siemens simatic et 200sp open controller cpu 1515sp pc
• canonical/siemens simatic et 200sp open controller cpu 1515sp pc2 firmware
• canonical/siemens simatic et 200sp open controller cpu 1515sp pc2
• canonical/siemens simatic et200mp im155-5 pn hf firmware
• version/siemens simatic et200mp im155-5 pn hf firmware/4.2
• canonical/siemens simatic et200mp im155-5 pn hf
• canonical/siemens simatic et200sp im155-6 mf hf firmware
• canonical/siemens simatic et200sp im155-6 mf hf
• canonical/siemens simatic et200sp im155-6 pn ha firmware
• canonical/siemens simatic et200sp im155-6 pn ha
• canonical/siemens simatic et200sp im155-6 pn hf firmware
• version/siemens simatic et200sp im155-6 pn hf firmware/4.2
• canonical/siemens simatic et200sp im155-6 pn hf
• canonical/siemens simatic et200sp im155-6 pn\/2 hf firmware
• version/siemens simatic et200sp im155-6 pn\/2 hf firmware/4.2
• canonical/siemens simatic et200sp im155-6 pn\/2 hf
• canonical/siemens simatic micro-drive pdc firmware
• canonical/siemens simatic micro-drive pdc
• canonical/siemens simatic pn\/pn coupler firmware
• version/siemens simatic pn\/pn coupler firmware/4.2
• canonical/siemens simatic pn\/pn coupler
• canonical/siemens simatic s7-1500 cpu 1511-1 pn firmware
• canonical/siemens simatic s7-1500 cpu 1511-1 pn
• canonical/siemens simatic s7-1500 cpu 1513-1 pn firmware
• canonical/siemens simatic s7-1500 cpu 1513-1 pn
• canonical/siemens simatic s7-1500 cpu 1515-2 pn firmware
• canonical/siemens simatic s7-1500 cpu 1515-2 pn
• canonical/siemens simatic s7-1500 cpu 1516-3 pn\/dp firmware
• canonical/siemens simatic s7-1500 cpu 1516-3 pn\/dp
• canonical/siemens simatic s7-1500 cpu 1517-3 pn\/dp firmware
• canonical/siemens simatic s7-1500 cpu 1517-3 pn\/dp
• canonical/siemens simatic s7-1500 cpu 1518-4 pn\/dp firmware
• canonical/siemens simatic s7-1500 cpu 1518-4 pn\/dp
• canonical/siemens simatic s7-1500 cpu 1511f-1 pn firmware
• canonical/siemens simatic s7-1500 cpu 1511f-1 pn
• canonical/siemens simatic s7-1500 cpu 1513f-1 pn firmware
• canonical/siemens simatic s7-1500 cpu 1513f-1 pn
• canonical/siemens simatic s7-1500 cpu 1515f-2 pn firmware
• canonical/siemens simatic s7-1500 cpu 1515f-2 pn
• canonical/siemens simatic s7-1500 cpu 1516f-3 pn\/dp firmware
• canonical/siemens simatic s7-1500 cpu 1516f-3 pn\/dp
• canonical/siemens simatic s7-1500 cpu 1517f-3 pn\/dp firmware
• canonical/siemens simatic s7-1500 cpu 1517f-3 pn\/dp
• canonical/siemens simatic s7-1500 cpu 1518f-4 pn\/dp firmware
• canonical/siemens simatic s7-1500 cpu 1518f-4 pn\/dp
• canonical/siemens simatic s7-1500
• canonical/siemens simatic s7-300 cpu firmware
• canonical/siemens simatic s7-300 cpu
• canonical/siemens simatic s7-400 pn\/dp firmware
• canonical/siemens simatic s7-400 pn\/dp
• version/siemens simatic s7-400 pn\/dp/v7
• canonical/siemens simatic s7-410 cpu firmware
• canonical/siemens simatic s7-410 cpu
• canonical/siemens simatic tdc cp51m1 firmware
• canonical/siemens simatic tdc cp51m1
• canonical/siemens simatic tdc cpu555 firmware
• canonical/siemens simatic tdc cpu555
• canonical/siemens simatic winac rtx \(f\) 2010 firmware
• canonical/siemens simatic winac rtx \(f\) 2010
• canonical/siemens sinamics s\/g control unit firmware
• canonical/siemens sinamics s\/g control unit