CVE-2019-6568

State: Published
Severity: 7.5 High
Published: Apr 17, 2019
Updated: Jun 3, 2026
Reserved: Jan 22, 2019

Description

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device.

The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C	siemens

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
SIMATIC CP 1604Siemens	All versionsAffected
SIMATIC CP 1616Siemens	All versionsAffected
SIMATIC CP 343-1 AdvancedSiemens	All versionsAffected
SIMATIC CP 443-1Siemens	All versions < V3.3Affected
SIMATIC CP 443-1Siemens	All versions < V3.3Affected
SIMATIC CP 443-1 AdvancedSiemens	All versions < V3.3Affected
SIMATIC CP 443-1 OPC UASiemens	All versionsAffected
SIMATIC ET 200pro IM154-8 PN/DP CPUSiemens	All versions < V3.2.16Affected
SIMATIC ET 200pro IM154-8F PN/DP CPUSiemens	All versions < V3.2.16Affected
SIMATIC ET 200pro IM154-8FX PN/DP CPUSiemens	All versions < V3.2.16Affected
SIMATIC ET 200S IM151-8 PN/DP CPUSiemens	All versions < V3.2.16Affected
SIMATIC ET 200S IM151-8F PN/DP CPUSiemens	All versions < V3.2.16Affected
SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)Siemens	All versions < V2.1.6Affected
SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)Siemens	All versions < V2.7Affected
SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants)Siemens	All versions < V15.1 Upd4Affected
SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants)Siemens	All versions < V15.1 Upd4Affected
SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900FSiemens	All versions < V15.1 Upd4Affected
SIMATIC IPC DiagMonitorSiemens	All versions < V5.1.3Affected
SIMATIC RF182CSiemens	All versionsAffected
SIMATIC RF185CSiemens	All versions < V1.1.0Affected
SIMATIC RF186CSiemens	All versions < V1.1.0Affected
SIMATIC RF188CSiemens	All versions < V1.1.0Affected
SIMATIC RF600R familySiemens	All versions < V3.2.1Affected
SIMATIC RFID 181EIPSiemens	All versionsAffected
SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens	All versions < V2.6.1Affected
SIMATIC S7-1500 Software ControllerSiemens	All versions < V2.7Affected
SIMATIC S7-300 CPU 314C-2 PN/DPSiemens	All versions < V3.3.16Affected
SIMATIC S7-300 CPU 315-2 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 315F-2 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 315T-3 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 317-2 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 317F-2 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 317T-3 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 317TF-3 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 319-3 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-300 CPU 319F-3 PN/DPSiemens	All versions < V3.2.16Affected
SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)Siemens	All versionsAffected
SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)Siemens	All versionsAffected
SIMATIC S7-PLCSIM AdvancedSiemens	All versions < V2.0 SP1 UPD1Affected
SIMATIC Teleservice Adapter IE AdvancedSiemens	All versionsAffected
SIMATIC Teleservice Adapter IE BasicSiemens	All versionsAffected
SIMATIC Teleservice Adapter IE StandardSiemens	All versionsAffected
SIMATIC WinAC RTX 2010Siemens	All versions < V2010 SP3Affected
SIMATIC WinAC RTX F 2010Siemens	All versions < V2010 SP3Affected
SIMATIC WinCC Runtime AdvancedSiemens	All versions < V15.1 Upd4Affected
SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)Siemens	All versions < V1.1.3Affected
SIMOCODE pro V PROFINET (incl. SIPLUS variants)Siemens	All versions < V2.1.3Affected
SINAMICS G130 V4.6 Control UnitSiemens	All versionsAffected
SINAMICS G130 V4.7 Control UnitSiemens	All versionsAffected
SINAMICS G130 V4.7 SP1 Control UnitSiemens	All versionsAffected
SINAMICS G130 V4.8 Control UnitSiemens	All versions < V4.8 HF6Affected
SINAMICS G130 V5.1 Control UnitSiemens	All versionsAffected
SINAMICS G130 V5.1 SP1 Control UnitSiemens	All versions < V5.1 SP1 HF4Affected
SINAMICS G150 V4.6 Control UnitSiemens	All versionsAffected
SINAMICS G150 V4.7 Control UnitSiemens	All versionsAffected
SINAMICS G150 V4.7 SP1 Control UnitSiemens	All versionsAffected
SINAMICS G150 V4.8 Control UnitSiemens	All versions < V4.8 HF6Affected
SINAMICS G150 V5.1 Control UnitSiemens	All versionsAffected
SINAMICS G150 V5.1 SP1 Control UnitSiemens	All versions < V5.1 SP1 HF4Affected
SINAMICS GH150 V4.7 (Control Unit)Siemens	All versionsAffected
SINAMICS GH150 V4.8 (Control Unit)Siemens	All versions < V4.8 SP2 HF9Affected
SINAMICS GL150 V4.7 (Control Unit)Siemens	All versionsAffected
SINAMICS GL150 V4.8 (Control Unit)Siemens	All versions < V4.8 SP2 HF9Affected
SINAMICS GM150 V4.7 (Control Unit)Siemens	All versionsAffected
SINAMICS GM150 V4.8 (Control Unit)Siemens	All versions < V4.8 SP2 HF9Affected
SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants)Siemens	All versionsAffected
SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)Siemens	All versionsAffected
SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants)Siemens	All versionsAffected
SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants)Siemens	All versions < V4.8 HF6Affected
SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants)Siemens	All versionsAffected
SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants)Siemens	All versions < V5.1 SP1 HF4Affected
SINAMICS S150 V4.6 Control UnitSiemens	All versionsAffected
SINAMICS S150 V4.7 Control UnitSiemens	All versionsAffected
SINAMICS S150 V4.7 SP1 Control UnitSiemens	All versionsAffected
SINAMICS S150 V4.8 Control UnitSiemens	All versions < V4.8 HF6Affected
SINAMICS S150 V5.1 Control UnitSiemens	All versionsAffected
SINAMICS S150 V5.1 SP1 Control UnitSiemens	All versions < V5.1 SP1 HF4Affected
SINAMICS S210Siemens	All versions < V5.1 SP1 HF8Affected
SINAMICS SL150 V4.7 (Control Unit)Siemens	All versions < V4.7 HF33Affected
SINAMICS SL150 V4.8 (Control Unit)Siemens	All versionsAffected
SINAMICS SM120 V4.7 (Control Unit)Siemens	All versionsAffected
SINAMICS SM120 V4.8 (Control Unit)Siemens	All versions < V4.8 SP2 HF10Affected
SINAMICS SM150 V4.8 (Control Unit)Siemens	All versionsAffected
SIPLUS ET 200S IM151-8 PN/DP CPUSiemens	All versions < V3.2.16Affected
SIPLUS ET 200S IM151-8F PN/DP CPUSiemens	All versions < V3.2.16Affected
SIPLUS NET CP 343-1 AdvancedSiemens	All versionsAffected
SIPLUS NET CP 443-1Siemens	All versions < V3.3Affected
SIPLUS NET CP 443-1 AdvancedSiemens	All versions < V3.3Affected
SIPLUS S7-300 CPU 314C-2 PN/DPSiemens	All versions < V3.3.16Affected
SIPLUS S7-300 CPU 315-2 PN/DPSiemens	All versions < V3.2.16Affected
SIPLUS S7-300 CPU 315F-2 PN/DPSiemens	All versions < V3.2.16Affected
SIPLUS S7-300 CPU 317-2 PN/DPSiemens	All versions < V3.2.16Affected
SIPLUS S7-300 CPU 317F-2 PN/DPSiemens	All versions < V3.2.16Affected
SITOP ManagerSiemens	All versions < V1.1Affected
SITOP PSU8600Siemens	All versions < V1.5Affected
SITOP UPS1600 (incl. SIPLUS variants)Siemens	All versions < V2.3Affected
TIM 1531 IRC (incl. SIPLUS NET variants)Siemens	All versions < V2.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.