Riskcovery

CVE-2019-19301

State
Published
Severity
7.5 High
Published
Apr 14, 2020
Updated
Aug 5, 2024
Reserved
Nov 26, 2019

Read the record on cve.org

Description

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:Csiemens

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
SCALANCE X200-4P IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE X201-3P IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE X201-3P IRT PROSiemens
  • All versions < V5.5.0Affected
SCALANCE X202-2IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE X202-2P IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE X202-2P IRT PROSiemens
  • All versions < V5.5.0Affected
SCALANCE X204-2Siemens
  • All versions < V5.2.5Affected
SCALANCE X204-2FMSiemens
  • All versions < V5.2.5Affected
SCALANCE X204-2LDSiemens
  • All versions < V5.2.5Affected
SCALANCE X204-2LD TSSiemens
  • All versions < V5.2.5Affected
SCALANCE X204-2TSSiemens
  • All versions < V5.2.5Affected
SCALANCE X204IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE X204IRT PROSiemens
  • All versions < V5.5.0Affected
SCALANCE X206-1Siemens
  • All versions < V5.2.5Affected
SCALANCE X206-1LDSiemens
  • All versions < V5.2.5Affected
SCALANCE X208Siemens
  • All versions < V5.2.5Affected
SCALANCE X208PROSiemens
  • All versions < V5.2.5Affected
SCALANCE X212-2Siemens
  • All versions < V5.2.5Affected
SCALANCE X212-2LDSiemens
  • All versions < V5.2.5Affected
SCALANCE X216Siemens
  • All versions < V5.2.5Affected
SCALANCE X224Siemens
  • All versions < V5.2.5Affected
SCALANCE X302-7 EEC (230V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (230V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (24V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (24V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 230V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 230V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 24V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X302-7 EEC (2x 24V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X304-2FESiemens
  • All versions < V4.1.4Affected
SCALANCE X306-1LD FESiemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (230V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (230V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (24V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (24V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 230V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 230V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 24V, coated)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-2 EEC (2x 24V)Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-3Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-3Siemens
  • All versions < V4.1.4Affected
SCALANCE X307-3LDSiemens
  • All versions < V4.1.4Affected
SCALANCE X307-3LDSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2Siemens
  • All versions < V4.1.4Affected
SCALANCE X308-2Siemens
  • All versions < V4.1.4Affected
SCALANCE X308-2LDSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2LDSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2LHSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2LHSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2LH+Siemens
  • All versions < V4.1.4Affected
SCALANCE X308-2LH+Siemens
  • All versions < V4.1.4Affected
SCALANCE X308-2MSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2MSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2M PoESiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2M PoESiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2M TSSiemens
  • All versions < V4.1.4Affected
SCALANCE X308-2M TSSiemens
  • All versions < V4.1.4Affected
SCALANCE X310Siemens
  • All versions < V4.1.4Affected
SCALANCE X310Siemens
  • All versions < V4.1.4Affected
SCALANCE X310FESiemens
  • All versions < V4.1.4Affected
SCALANCE X310FESiemens
  • All versions < V4.1.4Affected
SCALANCE X320-1 FESiemens
  • All versions < V4.1.4Affected
SCALANCE X320-1-2LD FESiemens
  • All versions < V4.1.4Affected
SCALANCE X408-2Siemens
  • All versions < V4.1.4Affected
SCALANCE XF201-3P IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE XF202-2P IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE XF204Siemens
  • All versions < V5.2.5Affected
SCALANCE XF204-2Siemens
  • All versions < V5.2.5Affected
SCALANCE XF204-2BA IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE XF204IRTSiemens
  • All versions < V5.5.0Affected
SCALANCE XF206-1Siemens
  • All versions < V5.2.5Affected
SCALANCE XF208Siemens
  • All versions < V5.2.5Affected
SCALANCE XR324-12M (230V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (230V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (230V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (230V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M (24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M TS (24V)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-12M TS (24V)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M EEC (2x 24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (230V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (230V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M PoE (24V, ports on rear)Siemens
  • All versions < V4.1.4Affected
SCALANCE XR324-4M PoE TS (24V, ports on front)Siemens
  • All versions < V4.1.4Affected
SIMATIC CP 343-1 AdvancedSiemens
  • All versionsAffected
SIMATIC CP 442-1 RNASiemens
  • All versions < V1.5.18Affected
SIMATIC CP 443-1Siemens
  • All versions < V3.3Affected
SIMATIC CP 443-1Siemens
  • All versions < V3.3Affected
SIMATIC CP 443-1 AdvancedSiemens
  • All versions < V3.3Affected
SIMATIC CP 443-1 RNASiemens
  • All versions < V1.5.18Affected
SIMATIC RF180CSiemens
  • All versionsAffected
SIMATIC RF182CSiemens
  • All versionsAffected
SIPLUS NET CP 343-1 AdvancedSiemens
  • All versionsAffected
SIPLUS NET CP 443-1Siemens
  • All versions < V3.3Affected
SIPLUS NET CP 443-1 AdvancedSiemens
  • All versions < V3.3Affected
SIPLUS NET SCALANCE X308-2Siemens
  • All versions < V4.1.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.