CVE-2019-10936 vulnerability in Siemens Products
Published on October 10, 2019

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

NVD

Weakness Type

What is a Resource Exhaustion Vulnerability?

The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CVE-2019-10936 has been classified to as a Resource Exhaustion vulnerability or weakness.

Products Associated with CVE-2019-10936

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-10936 are published in these products:

Siemens Sinumerik 828d

Siemens Sinumerik 840d Sl

Affected Versions

Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller:

Before * is affected.

Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200:

Before * is affected.

Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P:

Version All versions < V4.6 Patch 01 is affected.

Siemens SIMATIC CFU PA:

Before V1.2.0 is affected.

Siemens SIMATIC ET 200AL IM 157-1 PN:

Version All versions is affected.

Siemens SIMATIC ET 200M (incl. SIPLUS variants):

Version All versions is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN BA:

Before V4.3.0 is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN HF:

Before V4.4.0 is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN ST:

Before * is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN ST:

Before * is affected.

Siemens SIMATIC ET 200pro IM 154-3 PN HF:

Before * is affected.

Siemens SIMATIC ET 200pro IM 154-4 PN HF:

Before * is affected.

Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN BA:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants):

Version All versions < V1.2.1 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN HF:

Before V4.2.2 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN HS:

Before V4.0.1 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF:

Before V4.2.2 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF:

Before V4.2.1 is affected.

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants):

Before V2.0 is affected.

Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN: IO-Link Master:

Version All versions is affected.

Siemens SIMATIC ET200S (incl. SIPLUS variants):

Version All versions is affected.

Siemens SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants):

Before * is affected.

Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants):

Before * is affected.

Siemens SIMATIC HMI KTP Mobile Panels:

Before * is affected.

Siemens SIMATIC PN/PN Coupler:

Version All versions < V4.2.1 is affected.

Siemens SIMATIC PROFINET Driver:

Version All versions < V2.1 is affected.

Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants):

Version All versions < V4.4.0 is affected.

Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants):

Version All versions < V2.0 is affected.

Siemens SIMATIC S7-1500 Software Controller:

Version All versions < V2.0 is affected.

Siemens SIMATIC S7-300 CPU 314C-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 315-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 315F-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 315T-3 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 317-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 317F-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 317T-3 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 319-3 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-300 CPU 319F-3 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIMATIC S7-400 CPU 412-2 PN V7:

Before V7.0.3 is affected.

Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7:

Before V7.0.3 is affected.

Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7:

Before V7.0.3 is affected.

Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7:

Before V7.0.3 is affected.

Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7:

Before V7.0.3 is affected.

Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants):

Before V6.0.9 is affected.

Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants):

Before * is affected.

Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants):

Version All versions < V8.2.2 is affected.

Siemens SIMATIC TDC CP51M1:

Before V1.1.8 is affected.

Siemens SIMATIC TDC CPU555:

Before V1.1.1 is affected.

Siemens SIMATIC WinAC RTX 2010:

Version All versions < V2010 SP3 is affected.

Siemens SIMATIC WinAC RTX F 2010:

Version All versions < V2010 SP3 is affected.

Siemens SINAMICS DCM:

Version All versions < V1.5 HF1 is affected.

Siemens SINAMICS DCP:

Version All versions < V1.3 is affected.

Siemens SINAMICS G110M V4.7 PN Control Unit:

Version All versions < V4.7 SP10 HF5 is affected.

Siemens SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants):

Version All versions < V4.7 SP10 HF5 is affected.

Siemens SINAMICS G130 V4.7 Control Unit:

Version All versions < 4.8 is affected.

Siemens SINAMICS G150 Control Unit:

Version All versions < 4.8 is affected.

Siemens SINAMICS GH150 V4.7 Control Unit:

Version All versions is affected.

Siemens SINAMICS GL150 V4.7 Control Unit:

Version All versions is affected.

Siemens SINAMICS GM150 V4.7 Control Unit:

Version All versions is affected.

Siemens SINAMICS S110 Control Unit:

Before * is affected.

Siemens SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants):

Before * is affected.

Siemens SINAMICS S150 Control Unit:

Version All versions < 4.8 is affected.

Siemens SINAMICS SL150 V4.7 Control Unit:

Version All versions < V4.7 HF33 is affected.

Siemens SINAMICS SM120 V4.7 Control Unit:

Before * is affected.

Siemens SINUMERIK 828D:

Version All versions < V4.8 SP5 is affected.

Siemens SINUMERIK 840D sl:

Version All versions < V4.8 SP6 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN HF:

Before V4.4.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN HF:

Before V4.4.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL:

Before V4.4.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN ST:

Before * is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN ST:

Before * is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU:

Version All versions < V3.2.17 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL:

Before V4.2.2 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL:

Before * is affected.

Siemens SIPLUS NET PN/PN Coupler:

Version All versions < V4.2.1 is affected.

Siemens SIPLUS S7-300 CPU 314C-2 PN/DP:

Version All versions < V3.3.17 is affected.

Siemens SIPLUS S7-300 CPU 315-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIPLUS S7-300 CPU 315F-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIPLUS S7-300 CPU 317-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIPLUS S7-300 CPU 317F-2 PN/DP:

Version All versions < V3.2.17 is affected.

Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7:

Before V7.0.3 is affected.

Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7:

Before V7.0.3 is affected.

siemens dk_standard_ethernet_controller_firmware:

Before and including * is affected.

siemens ek-ertec_200_firmware:

Before * is affected.

siemens ek-ertec_200p_firmware:

Before 4.6 is affected.

siemens simatic_cfu_pa:

Before v1.2.0 is affected.

siemens simatic_et200ecopn_firmware:

Before and including * is affected.

siemens simatic_et200s_firmware:

Before and including * is affected.

siemens simatic_et_200al_firmware:

Before and including * is affected.

siemens simatic_et_200m_firmware:

Before and including * is affected.

siemens simatic_et_200mp_firmware:

Before v4.3.0 is affected.

siemens simatic_et_200pro_firmware:

Before and including * is affected.

siemens simatic_et_200s_firmware:

Before v3.2.17 is affected.

siemens simatic_et_200sp_firmware:

Before and including * is affected.

siemens simatic_hmi_comfort_outdoor_panels:

Before and including * is affected.

siemens simatic_pn\/pn_coupler_6es7158-3ad01-0xa0:

Before v4.2.1 is affected.

siemens simatic_profinet_driver:

Before v2.1 is affected.

siemens simatic_s7-300_cpu_314_firmware:

Before v3.2.17 is affected.

siemens simatic_s7-300_cpu_315-2_dp_firmware:

Before v3.2.17 is affected.

siemens simatic_s7-300_cpu_315f-2_dp_firmware:

Before v3.2.17 is affected.

siemens simatic_s7-300_cpu_317-2_dp_firmware:

Before v3.2.17 is affected.

siemens simatic_s7-300_cpu_317-2_pn\/dp_firmware:

Before v3.2.17 is affected.

siemens simatic_s7-300_cpu_319-3_pn\/dp_firmware:

Before v3.2.17 is affected.

siemens simatic_s7-400_cpu_412-2_pn:

Before v7.0.3 is affected.

siemens simatic_s7-400_cpu_414-3_pn\/dp:

Before v7.0.3 is affected.

siemens simatic_s7-400_cpu_416-3_pn\/dp:

Before and including v7.0.3 is affected.

siemens simatic_s7-400_h_v6_firmware:

Before and including v6.0.9 is affected.

siemens simatic_s7-400_pn\/dp_v6_firmware:

Before and including * is affected.

siemens simatic_s7-410_cpu_firmware:

Before v8.2.2 is affected.

siemens simatic_s7-1200_cpu:

Before v4.4.0 is affected.

siemens simatic_s7-1500_cpu:

Before v2.0 is affected.

siemens simatic_s7-1500_controller:

Before v2.0 is affected.

siemens simatic_tdc_cp51m1_firmware:

Before v1.1.8 is affected.

siemens simatic_tdc_cpu555_firmware:

Before v1.1.1 is affected.

siemens simatic_winac_rtx_2010:

Before v2010_sp3 is affected.

siemens simatic_winac_rtx_\(f\)_2010:

Before v2010_sp3 is affected.

siemens sinamics_dcm:

Before v1.5_hf1 is affected.

siemens sinamics_dcp:

Before v1.3 is affected.

siemens sinamics_g110m:

Before v4.7_sp10_hf5 is affected.

siemens sinamics_g120:

Before v4.7_sp10_hf5 is affected.

siemens sinamics_g130:

Before v4.8 is affected.

siemens sinamics_g150:

Before v4.8 is affected.

siemens sinamics_gh150:

Before and including * is affected.

siemens sinamics_gl150:

Before and including * is affected.

siemens sinamics_gm150:

Before * is affected.

siemens sinamics_s110:

Before and including * is affected.

siemens sinamics_s120:

Before and including * is affected.

siemens sinamics_sl150:

Before v4.8 is affected.

siemens sinamics_sl150:

Before v4.7_hf33 is affected.

siemens sinamics_sm120:

Before and including * is affected.

siemens sinumerik_828d:

Before v4.8_sp5 is affected.

siemens sinumerik_840d_sl:

Before v4.8_sp6 is affected.

siemens siplus_s7-300_cpu_314:

Before v3.3.17 is affected.

Exploit Probability

EPSS

1.99%

Percentile

83.35%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

CVE-2019-10936 vulnerability in Siemens ProductsPublished on October 10, 2019

Weakness Type

What is a Resource Exhaustion Vulnerability?

Products Associated with CVE-2019-10936

Affected Versions

Exploit Probability

CVE-2019-10936 vulnerability in Siemens Products
Published on October 10, 2019