CVE-2019-10936

State
Published
Severity
7.5 High
Published
Oct 10, 2019
Updated
Aug 4, 2024
Reserved
Apr 8, 2019

Read the record on cve.org

Description

Affected devices improperly handle large amounts of specially crafted UDP packets.

This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet ControllerSiemens
  • all versionsAffected
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200Siemens
  • all versionsAffected
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200PSiemens
  • All versions < V4.6 Patch 01Affected
SIMATIC CFU PASiemens
  • before V1.2.0Affected
SIMATIC ET 200AL IM 157-1 PNSiemens
  • All versionsAffected
SIMATIC ET 200M (incl. SIPLUS variants)Siemens
  • All versionsAffected
SIMATIC ET 200MP IM 155-5 PN BASiemens
  • before V4.3.0Affected
SIMATIC ET 200MP IM 155-5 PN HFSiemens
  • before V4.4.0Affected
SIMATIC ET 200MP IM 155-5 PN STSiemens
  • all versionsAffected
SIMATIC ET 200MP IM 155-5 PN STSiemens
  • all versionsAffected
SIMATIC ET 200pro IM 154-3 PN HFSiemens
  • all versionsAffected
SIMATIC ET 200pro IM 154-4 PN HFSiemens
  • all versionsAffected
SIMATIC ET 200pro IM 154-8 PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIMATIC ET 200pro IM 154-8F PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIMATIC ET 200pro IM 154-8FX PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIMATIC ET 200S IM 151-8 PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIMATIC ET 200S IM 151-8F PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIMATIC ET 200SP IM 155-6 PN BASiemens
  • all versionsAffected
SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)Siemens
  • All versions < V1.2.1Affected
SIMATIC ET 200SP IM 155-6 PN HFSiemens
  • before V4.2.2Affected
SIMATIC ET 200SP IM 155-6 PN HSSiemens
  • before V4.0.1Affected
SIMATIC ET 200SP IM 155-6 PN STSiemens
  • all versionsAffected
SIMATIC ET 200SP IM 155-6 PN STSiemens
  • all versionsAffected
SIMATIC ET 200SP IM 155-6 PN ST BASiemens
  • all versionsAffected
SIMATIC ET 200SP IM 155-6 PN ST BASiemens
  • all versionsAffected
SIMATIC ET 200SP IM 155-6 PN/2 HFSiemens
  • before V4.2.2Affected
SIMATIC ET 200SP IM 155-6 PN/3 HFSiemens
  • before V4.2.1Affected
SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)Siemens
  • before V2.0Affected
SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 4AO U/I 4xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12Siemens
  • All versionsAffected
SIMATIC ET200ecoPN: IO-Link MasterSiemens
  • All versionsAffected
SIMATIC ET200S (incl. SIPLUS variants)Siemens
  • All versionsAffected
SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)Siemens
  • all versionsAffected
SIMATIC HMI Comfort Panels (incl. SIPLUS variants)Siemens
  • all versionsAffected
SIMATIC HMI KTP Mobile PanelsSiemens
  • all versionsAffected
SIMATIC PN/PN CouplerSiemens
  • All versions < V4.2.1Affected
SIMATIC PROFINET DriverSiemens
  • All versions < V2.1Affected
SIMATIC S7-1200 CPU family (incl. SIPLUS variants)Siemens
  • All versions < V4.4.0Affected
SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens
  • All versions < V2.0Affected
SIMATIC S7-1500 Software ControllerSiemens
  • All versions < V2.0Affected
SIMATIC S7-300 CPU 314C-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 315-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 315F-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 315T-3 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 317-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 317F-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 317T-3 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 317TF-3 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 319-3 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-300 CPU 319F-3 PN/DPSiemens
  • All versions < V3.2.17Affected
SIMATIC S7-400 CPU 412-2 PN V7Siemens
  • before V7.0.3Affected
SIMATIC S7-400 CPU 414-3 PN/DP V7Siemens
  • before V7.0.3Affected
SIMATIC S7-400 CPU 414F-3 PN/DP V7Siemens
  • before V7.0.3Affected
SIMATIC S7-400 CPU 416-3 PN/DP V7Siemens
  • before V7.0.3Affected
SIMATIC S7-400 CPU 416F-3 PN/DP V7Siemens
  • before V7.0.3Affected
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)Siemens
  • before V6.0.9Affected
SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)Siemens
  • all versionsAffected
SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)Siemens
  • All versions < V8.2.2Affected
SIMATIC TDC CP51M1Siemens
  • before V1.1.8Affected
SIMATIC TDC CPU555Siemens
  • before V1.1.1Affected
SIMATIC WinAC RTX 2010Siemens
  • All versions < V2010 SP3Affected
SIMATIC WinAC RTX F 2010Siemens
  • All versions < V2010 SP3Affected
SINAMICS DCMSiemens
  • All versions < V1.5 HF1Affected
SINAMICS DCPSiemens
  • All versions < V1.3Affected
SINAMICS G110M V4.7 PN Control UnitSiemens
  • All versions < V4.7 SP10 HF5Affected
SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)Siemens
  • All versions < V4.7 SP10 HF5Affected
SINAMICS G130 V4.7 Control UnitSiemens
  • All versions < 4.8Affected
SINAMICS G150 Control UnitSiemens
  • All versions < 4.8Affected
SINAMICS GH150 V4.7 Control UnitSiemens
  • All versionsAffected
SINAMICS GL150 V4.7 Control UnitSiemens
  • All versionsAffected
SINAMICS GM150 V4.7 Control UnitSiemens
  • All versionsAffected
SINAMICS S110 Control UnitSiemens
  • all versionsAffected
SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)Siemens
  • all versionsAffected
SINAMICS S150 Control UnitSiemens
  • All versions < 4.8Affected
SINAMICS SL150 V4.7 Control UnitSiemens
  • All versions < V4.7 HF33Affected
SINAMICS SM120 V4.7 Control UnitSiemens
  • all versionsAffected
SINUMERIK 828DSiemens
  • All versions < V4.8 SP5Affected
SINUMERIK 840D slSiemens
  • All versions < V4.8 SP6Affected
SIPLUS ET 200MP IM 155-5 PN HFSiemens
  • before V4.4.0Affected
SIPLUS ET 200MP IM 155-5 PN HFSiemens
  • before V4.4.0Affected
SIPLUS ET 200MP IM 155-5 PN HF T1 RAILSiemens
  • before V4.4.0Affected
SIPLUS ET 200MP IM 155-5 PN STSiemens
  • all versionsAffected
SIPLUS ET 200MP IM 155-5 PN STSiemens
  • all versionsAffected
SIPLUS ET 200MP IM 155-5 PN ST TX RAILSiemens
  • all versionsAffected
SIPLUS ET 200MP IM 155-5 PN ST TX RAILSiemens
  • all versionsAffected
SIPLUS ET 200S IM 151-8 PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIPLUS ET 200S IM 151-8F PN/DP CPUSiemens
  • All versions < V3.2.17Affected
SIPLUS ET 200SP IM 155-6 PN HFSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN HFSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN HFSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN HFSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN HF T1 RAILSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN HF T1 RAILSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN HF TX RAILSiemens
  • before V4.2.2Affected
SIPLUS ET 200SP IM 155-6 PN STSiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN STSiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN ST BASiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN ST BASiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN ST BA TX RAILSiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN ST BA TX RAILSiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN ST TX RAILSiemens
  • all versionsAffected
SIPLUS ET 200SP IM 155-6 PN ST TX RAILSiemens
  • all versionsAffected
SIPLUS NET PN/PN CouplerSiemens
  • All versions < V4.2.1Affected
SIPLUS S7-300 CPU 314C-2 PN/DPSiemens
  • All versions < V3.3.17Affected
SIPLUS S7-300 CPU 315-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIPLUS S7-300 CPU 315F-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIPLUS S7-300 CPU 317-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIPLUS S7-300 CPU 317F-2 PN/DPSiemens
  • All versions < V3.2.17Affected
SIPLUS S7-400 CPU 414-3 PN/DP V7Siemens
  • before V7.0.3Affected
SIPLUS S7-400 CPU 416-3 PN/DP V7Siemens
  • before V7.0.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.