CVE-2019-10936

Summary

Affected devices improperly handle large amounts of specially crafted UDP packets.

This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Affected Software

VendorProductVersion RangeStatus
SiemensDevelopment/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller0 < *affected
SiemensDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 2000 < *affected
SiemensDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 200PAll versions < V4.6 Patch 01affected
SiemensSIMATIC CFU PA0 < V1.2.0affected
SiemensSIMATIC ET 200AL IM 157-1 PNAll versionsaffected
SiemensSIMATIC ET 200M (incl. SIPLUS variants)All versionsaffected
SiemensSIMATIC ET 200MP IM 155-5 PN BA0 < V4.3.0affected
SiemensSIMATIC ET 200MP IM 155-5 PN HF0 < V4.4.0affected
SiemensSIMATIC ET 200MP IM 155-5 PN ST0 < *affected
SiemensSIMATIC ET 200MP IM 155-5 PN ST0 < *affected
SiemensSIMATIC ET 200pro IM 154-3 PN HF0 < *affected
SiemensSIMATIC ET 200pro IM 154-4 PN HF0 < *affected
SiemensSIMATIC ET 200pro IM 154-8 PN/DP CPUAll versions < V3.2.17affected
SiemensSIMATIC ET 200pro IM 154-8F PN/DP CPUAll versions < V3.2.17affected
SiemensSIMATIC ET 200pro IM 154-8FX PN/DP CPUAll versions < V3.2.17affected
SiemensSIMATIC ET 200S IM 151-8 PN/DP CPUAll versions < V3.2.17affected
SiemensSIMATIC ET 200S IM 151-8F PN/DP CPUAll versions < V3.2.17affected
SiemensSIMATIC ET 200SP IM 155-6 PN BA0 < *affected
SiemensSIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)All versions < V1.2.1affected
SiemensSIMATIC ET 200SP IM 155-6 PN HF0 < V4.2.2affected
SiemensSIMATIC ET 200SP IM 155-6 PN HS0 < V4.0.1affected
SiemensSIMATIC ET 200SP IM 155-6 PN ST0 < *affected
SiemensSIMATIC ET 200SP IM 155-6 PN ST0 < *affected
SiemensSIMATIC ET 200SP IM 155-6 PN ST BA0 < *affected
SiemensSIMATIC ET 200SP IM 155-6 PN ST BA0 < *affected
SiemensSIMATIC ET 200SP IM 155-6 PN/2 HF0 < V4.2.2affected
SiemensSIMATIC ET 200SP IM 155-6 PN/3 HF0 < V4.2.1affected
SiemensSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)0 < V2.0affected
SiemensSIMATIC ET200ecoPN, 16DI, DC24V, 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 4AO U/I 4xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8AI RTD/TC 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8DI, DC24V, 4xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8DI, DC24V, 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12All versionsaffected
SiemensSIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12All versionsaffected
SiemensSIMATIC ET200ecoPN: IO-Link MasterAll versionsaffected
SiemensSIMATIC ET200S (incl. SIPLUS variants)All versionsaffected
SiemensSIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)0 < *affected
SiemensSIMATIC HMI Comfort Panels (incl. SIPLUS variants)0 < *affected
SiemensSIMATIC HMI KTP Mobile Panels0 < *affected
SiemensSIMATIC PN/PN CouplerAll versions < V4.2.1affected
SiemensSIMATIC PROFINET DriverAll versions < V2.1affected
SiemensSIMATIC S7-1200 CPU family (incl. SIPLUS variants)All versions < V4.4.0affected
SiemensSIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)All versions < V2.0affected
SiemensSIMATIC S7-1500 Software ControllerAll versions < V2.0affected
SiemensSIMATIC S7-300 CPU 314C-2 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 315-2 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 315F-2 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 315T-3 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 317-2 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 317F-2 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 317T-3 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 317TF-3 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 319-3 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-300 CPU 319F-3 PN/DPAll versions < V3.2.17affected
SiemensSIMATIC S7-400 CPU 412-2 PN V70 < V7.0.3affected
SiemensSIMATIC S7-400 CPU 414-3 PN/DP V70 < V7.0.3affected
SiemensSIMATIC S7-400 CPU 414F-3 PN/DP V70 < V7.0.3affected
SiemensSIMATIC S7-400 CPU 416-3 PN/DP V70 < V7.0.3affected
SiemensSIMATIC S7-400 CPU 416F-3 PN/DP V70 < V7.0.3affected
SiemensSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)0 < V6.0.9affected
SiemensSIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)0 < *affected
SiemensSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)All versions < V8.2.2affected
SiemensSIMATIC TDC CP51M10 < V1.1.8affected
SiemensSIMATIC TDC CPU5550 < V1.1.1affected
SiemensSIMATIC WinAC RTX 2010All versions < V2010 SP3affected
SiemensSIMATIC WinAC RTX F 2010All versions < V2010 SP3affected
SiemensSINAMICS DCMAll versions < V1.5 HF1affected
SiemensSINAMICS DCPAll versions < V1.3affected
SiemensSINAMICS G110M V4.7 PN Control UnitAll versions < V4.7 SP10 HF5affected
SiemensSINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)All versions < V4.7 SP10 HF5affected
SiemensSINAMICS G130 V4.7 Control UnitAll versions < 4.8affected
SiemensSINAMICS G150 Control UnitAll versions < 4.8affected
SiemensSINAMICS GH150 V4.7 Control UnitAll versionsaffected
SiemensSINAMICS GL150 V4.7 Control UnitAll versionsaffected
SiemensSINAMICS GM150 V4.7 Control UnitAll versionsaffected
SiemensSINAMICS S110 Control Unit0 < *affected
SiemensSINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)0 < *affected
SiemensSINAMICS S150 Control UnitAll versions < 4.8affected
SiemensSINAMICS SL150 V4.7 Control UnitAll versions < V4.7 HF33affected
SiemensSINAMICS SM120 V4.7 Control Unit0 < *affected
SiemensSINUMERIK 828DAll versions < V4.8 SP5affected
SiemensSINUMERIK 840D slAll versions < V4.8 SP6affected
SiemensSIPLUS ET 200MP IM 155-5 PN HF0 < V4.4.0affected
SiemensSIPLUS ET 200MP IM 155-5 PN HF0 < V4.4.0affected
SiemensSIPLUS ET 200MP IM 155-5 PN HF T1 RAIL0 < V4.4.0affected
SiemensSIPLUS ET 200MP IM 155-5 PN ST0 < *affected
SiemensSIPLUS ET 200MP IM 155-5 PN ST0 < *affected
SiemensSIPLUS ET 200MP IM 155-5 PN ST TX RAIL0 < *affected
SiemensSIPLUS ET 200MP IM 155-5 PN ST TX RAIL0 < *affected
SiemensSIPLUS ET 200S IM 151-8 PN/DP CPUAll versions < V3.2.17affected
SiemensSIPLUS ET 200S IM 151-8F PN/DP CPUAll versions < V3.2.17affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF T1 RAIL0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN HF TX RAIL0 < V4.2.2affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST BA0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST BA0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST TX RAIL0 < *affected
SiemensSIPLUS ET 200SP IM 155-6 PN ST TX RAIL0 < *affected
SiemensSIPLUS NET PN/PN CouplerAll versions < V4.2.1affected
SiemensSIPLUS S7-300 CPU 314C-2 PN/DPAll versions < V3.3.17affected
SiemensSIPLUS S7-300 CPU 315-2 PN/DPAll versions < V3.2.17affected
SiemensSIPLUS S7-300 CPU 315F-2 PN/DPAll versions < V3.2.17affected
SiemensSIPLUS S7-300 CPU 317-2 PN/DPAll versions < V3.2.17affected
SiemensSIPLUS S7-300 CPU 317F-2 PN/DPAll versions < V3.2.17affected
SiemensSIPLUS S7-400 CPU 414-3 PN/DP V70 < V7.0.3affected
SiemensSIPLUS S7-400 CPU 416-3 PN/DP V70 < V7.0.3affected

Weaknesses

  • CWE-400: CWE-400: Uncontrolled Resource Consumption

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References