CVE-2019-13946

State: Published
Severity: 7.5 High
Published: Feb 11, 2020
Updated: Aug 5, 2024
Reserved: Jul 18, 2019

Description

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack.

The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C	siemens

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet ControllerSiemens	all versionsAffected
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200Siemens	All Versions < V4.5Affected
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200PSiemens	All Versions < V4.6Affected
PROFINET Driver for ControllerSiemens	All Versions < V2.1Affected
RUGGEDCOM RM1224 familySiemens	All versions < V4.3Affected
SCALANCE M804PBSiemens	All versions < V4.3Affected
SCALANCE M812-1 ADSL-RouterSiemens	All versions < V4.3Affected
SCALANCE M812-1 ADSL-RouterSiemens	All versions < V4.3Affected
SCALANCE M816-1 ADSL-RouterSiemens	All versions < V4.3Affected
SCALANCE M816-1 ADSL-RouterSiemens	All versions < V4.3Affected
SCALANCE M826-2 SHDSL-RouterSiemens	All versions < V4.3Affected
SCALANCE M874-2Siemens	All versions < V4.3Affected
SCALANCE M874-3Siemens	All versions < V4.3Affected
SCALANCE M876-3Siemens	All versions < V4.3Affected
SCALANCE M876-3 (ROK)Siemens	All versions < V4.3Affected
SCALANCE M876-4 (EU)Siemens	All versions < V4.3Affected
SCALANCE M876-4 (NAM)Siemens	All versions < V4.3Affected
SCALANCE S615 LAN-RouterSiemens	All versions < V4.3Affected
SCALANCE W-700 IEEE 802.11n familySiemens	All versions <= V6.0.1Affected
SCALANCE X200-4P IRTSiemens	All Versions < V5.3Affected
SCALANCE X201-3P IRTSiemens	All Versions < V5.3Affected
SCALANCE X201-3P IRT PROSiemens	All Versions < V5.3Affected
SCALANCE X202-2IRTSiemens	All Versions < V5.3Affected
SCALANCE X202-2P IRTSiemens	All Versions < V5.3Affected
SCALANCE X202-2P IRT PROSiemens	All Versions < V5.3Affected
SCALANCE X204-2Siemens	All versions < V5.2.5Affected
SCALANCE X204-2FMSiemens	All versions < V5.2.5Affected
SCALANCE X204-2LDSiemens	All versions < V5.2.5Affected
SCALANCE X204-2LD TSSiemens	All versions < V5.2.5Affected
SCALANCE X204-2TSSiemens	All versions < V5.2.5Affected
SCALANCE X204IRTSiemens	All Versions < V5.3Affected
SCALANCE X204IRT PROSiemens	All Versions < V5.3Affected
SCALANCE X206-1Siemens	All versions < V5.2.5Affected
SCALANCE X206-1LDSiemens	All versions < V5.2.5Affected
SCALANCE X208Siemens	All versions < V5.2.5Affected
SCALANCE X208PROSiemens	All versions < V5.2.5Affected
SCALANCE X212-2Siemens	All versions < V5.2.5Affected
SCALANCE X212-2LDSiemens	All versions < V5.2.5Affected
SCALANCE X216Siemens	All versions < V5.2.5Affected
SCALANCE X224Siemens	All versions < V5.2.5Affected
SCALANCE X302-7 EEC (230V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (230V)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (24V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (24V)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 230V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 230V)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 24V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 24V)Siemens	All versions < V4.1.4Affected
SCALANCE X304-2FESiemens	All versions < V4.1.4Affected
SCALANCE X306-1LD FESiemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (230V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (230V)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (24V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (24V)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 230V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 230V)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 24V, coated)Siemens	All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 24V)Siemens	All versions < V4.1.4Affected
SCALANCE X307-3Siemens	All versions < V4.1.4Affected
SCALANCE X307-3Siemens	All versions < V4.1.4Affected
SCALANCE X307-3LDSiemens	All versions < V4.1.4Affected
SCALANCE X307-3LDSiemens	All versions < V4.1.4Affected
SCALANCE X308-2Siemens	All versions < V4.1.4Affected
SCALANCE X308-2Siemens	All versions < V4.1.4Affected
SCALANCE X308-2LDSiemens	All versions < V4.1.4Affected
SCALANCE X308-2LDSiemens	All versions < V4.1.4Affected
SCALANCE X308-2LHSiemens	All versions < V4.1.4Affected
SCALANCE X308-2LHSiemens	All versions < V4.1.4Affected
SCALANCE X308-2LH+Siemens	All versions < V4.1.4Affected
SCALANCE X308-2LH+Siemens	All versions < V4.1.4Affected
SCALANCE X308-2MSiemens	All versions < V4.1.4Affected
SCALANCE X308-2MSiemens	All versions < V4.1.4Affected
SCALANCE X308-2M PoESiemens	All versions < V4.1.4Affected
SCALANCE X308-2M PoESiemens	All versions < V4.1.4Affected
SCALANCE X308-2M TSSiemens	All versions < V4.1.4Affected
SCALANCE X308-2M TSSiemens	All versions < V4.1.4Affected
SCALANCE X310Siemens	All versions < V4.1.4Affected
SCALANCE X310Siemens	All versions < V4.1.4Affected
SCALANCE X310FESiemens	All versions < V4.1.4Affected
SCALANCE X310FESiemens	All versions < V4.1.4Affected
SCALANCE X320-1 FESiemens	All versions < V4.1.4Affected
SCALANCE X320-1-2LD FESiemens	All versions < V4.1.4Affected
SCALANCE X408-2Siemens	All versions < V4.1.4Affected
SCALANCE XB-200 familySiemens	All Versions < V3.0Affected
SCALANCE XC-200Siemens	All Versions < V3.0Affected
SCALANCE XF-200BASiemens	All Versions < V3.0Affected
SCALANCE XF201-3P IRTSiemens	All Versions < V5.3Affected
SCALANCE XF202-2P IRTSiemens	All Versions < V5.3Affected
SCALANCE XF204Siemens	All versions < V5.2.5Affected
SCALANCE XF204-2Siemens	All versions < V5.2.5Affected
SCALANCE XF204-2BA IRTSiemens	All Versions < V5.3Affected
SCALANCE XF204IRTSiemens	All Versions < V5.3Affected
SCALANCE XF206-1Siemens	All versions < V5.2.5Affected
SCALANCE XF208Siemens	All versions < V5.2.5Affected
SCALANCE XM-400 familySiemens	All Versions < V6.0Affected
SCALANCE XP-200Siemens	All Versions < V3.0Affected
SCALANCE XR-300WG familySiemens	All Versions < V3.0Affected
SCALANCE XR-500 familySiemens	All Versions < V6.0Affected
SCALANCE XR324-12M (230V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (230V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (230V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (230V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M TS (24V)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-12M TS (24V)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (230V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (230V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (24V, ports on front)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (24V, ports on rear)Siemens	All versions < V4.1.4Affected
SCALANCE XR324-4M PoE TS (24V, ports on front)Siemens	All versions < V4.1.4Affected
SIMATIC CP 1616 and CP 1604Siemens	All Versions < V2.8Affected
SIMATIC CP 343-1Siemens	All versionsAffected
SIMATIC CP 343-1 AdvancedSiemens	All versionsAffected
SIMATIC CP 343-1 ERPCSiemens	All versionsAffected
SIMATIC CP 343-1 LeanSiemens	All versionsAffected
SIMATIC CP 443-1Siemens	before V3.3Affected
SIMATIC CP 443-1Siemens	before V3.3Affected
SIMATIC CP 443-1 AdvancedSiemens	before V3.3Affected
SIMATIC CP 443-1 OPC UASiemens	All versionsAffected
SIMATIC ET 200AL IM 157-1 PNSiemens	All versionsAffected
SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants)Siemens	All versionsAffected
SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants)Siemens	All versionsAffected
SIMATIC ET 200MP IM 155-5 PN HFSiemens	before V4.2.0Affected
SIMATIC ET 200MP IM 155-5 PN STSiemens	before V4.1.0Affected
SIMATIC ET 200pro IM 154-3 PN HFSiemens	all versionsAffected
SIMATIC ET 200pro IM 154-4 PN HFSiemens	All versionsAffected
SIMATIC ET 200SP IM 155-6 PN BASiemens	all versionsAffected
SIMATIC ET 200SP IM 155-6 PN HFSiemens	before V4.2.0Affected
SIMATIC ET 200SP IM 155-6 PN STSiemens	before V4.1.0Affected
SIMATIC ET 200SP IM 155-6 PN ST BASiemens	before V4.1.0Affected
SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 4AO U/I 4xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12Siemens	All versionsAffected
SIMATIC ET200ecoPN: IO-Link MasterSiemens	All versionsAffected
SIMATIC ET200S (incl. SIPLUS variants)Siemens	All versionsAffected
SIMATIC IPC Support, Package for VxWorksSiemens	all versionsAffected
SIMATIC MV420 SR-BSiemens	before V7.0.6Affected
SIMATIC MV420 SR-B BodySiemens	before V7.0.6Affected
SIMATIC MV420 SR-PSiemens	before V7.0.6Affected
SIMATIC MV420 SR-P BodySiemens	before V7.0.6Affected
SIMATIC MV440 HRSiemens	before V7.0.6Affected
SIMATIC MV440 SRSiemens	before V7.0.6Affected
SIMATIC MV440 URSiemens	before V7.0.6Affected
SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)Siemens	All VersionsAffected
SIMATIC RF180CSiemens	All versionsAffected
SIMATIC RF182CSiemens	All versionsAffected
SIMATIC RF600R familySiemens	All versions < V3Affected
SIMOTION CSiemens	All versions < V4.5Affected
SIMOTION DSiemens	All versions < V4.5Affected
SIMOTION PSiemens	All versions < V4.5Affected
SINAMICS DCPSiemens	All Versions < V1.3Affected
SIPLUS ET 200MP IM 155-5 PN HFSiemens	before V4.2.0Affected
SIPLUS ET 200MP IM 155-5 PN HFSiemens	before V4.2.0Affected
SIPLUS ET 200MP IM 155-5 PN HF T1 RAILSiemens	before V4.2.0Affected
SIPLUS ET 200MP IM 155-5 PN STSiemens	before V4.1.0Affected
SIPLUS ET 200MP IM 155-5 PN ST TX RAILSiemens	before V4.1.0Affected
SIPLUS ET 200SP IM 155-6 PN HFSiemens	before V4.2.0Affected
SIPLUS ET 200SP IM 155-6 PN HFSiemens	before V4.2.0Affected
SIPLUS ET 200SP IM 155-6 PN HF T1 RAILSiemens	before V4.2.0Affected
SIPLUS ET 200SP IM 155-6 PN STSiemens	before V4.1.0Affected
SIPLUS ET 200SP IM 155-6 PN ST BASiemens	before V4.1.0Affected
SIPLUS ET 200SP IM 155-6 PN ST BA TX RAILSiemens	before V4.1.0Affected
SIPLUS ET 200SP IM 155-6 PN ST TX RAILSiemens	before V4.1.0Affected
SIPLUS NET CP 343-1Siemens	All versionsAffected
SIPLUS NET CP 343-1 AdvancedSiemens	All versionsAffected
SIPLUS NET CP 343-1 LeanSiemens	All versionsAffected
SIPLUS NET CP 443-1Siemens	before V3.3Affected
SIPLUS NET CP 443-1 AdvancedSiemens	before V3.3Affected
SIPLUS NET SCALANCE X308-2Siemens	All versions < V4.1.4Affected
SOFTNET-IE PNIOSiemens	All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.