CVE-2019-19279
- State
- Published
- Severity
- Not scored
- Published
- Mar 10, 2020
- Updated
- Aug 5, 2024
- Reserved
- Nov 26, 2019
Description
A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.
Scores
The record has no CVSS score.
Weaknesses
- CWE-20 Improper Input Validation
Affected Products
| Product | Versions |
|---|---|
SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modulesSiemens AG |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.