CVE-2019-13939 vulnerability in Siemens Products
Published on January 16, 2020

A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.

NVD

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Products Associated with CVE-2019-13939

Want to know whenever a new CVE is published for Siemens products? stack.watch will email you.

Siemens Nucleus Net

Siemens Nucleus Readystart

Siemens Nucleus Safetycert

Siemens Nucleus Source Code

Siemens Vstar

Siemens Nucleus Rtos

Siemens Capital Vstar

Siemens Nucleus Readystart V3

Affected Versions

Siemens APOGEE MEC/MBC/PXC (P2):

Version All versions < V2.8.2 is affected.

Siemens APOGEE PXC Compact (BACnet):

Before V3.5.3 is affected.

Siemens APOGEE PXC Compact (P2 Ethernet):

Version V2.8.2 and below V2.8.19 is affected.

Siemens APOGEE PXC Modular (BACnet):

Before V3.5.3 is affected.

Siemens APOGEE PXC Modular (P2 Ethernet):

Version V2.8.2 and below V2.8.19 is affected.

Siemens Capital Embedded AR Classic 431-422:

Before * is affected.

Siemens Capital Embedded AR Classic R20-11:

Before V2303 is affected.

Siemens Desigo PXC00-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC00-U:

Version All versions >= V2.3x and < V6.00.327 is affected.

Siemens Desigo PXC001-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC100-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC12-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC128-U:

Version All versions >= V2.3x and < V6.00.327 is affected.

Siemens Desigo PXC200-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC22-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC22.1-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC36.1-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC50-E.D:

Version V2.3 and below V6.0.327 is affected.

Siemens Desigo PXC64-U:

Version All versions >= V2.3x and < V6.00.327 is affected.

Siemens Desigo PXM20-E:

Version V2.3 and below V6.0.327 is affected.

Siemens Nucleus NET:

Before * is affected.

Siemens Nucleus ReadyStart V3:

Before V2017.02.3 is affected.

Siemens Nucleus Source Code:

Before * is affected.

Siemens SIMOTICS CONNECT 400:

Version All versions < V0.3.0.330 is affected.

Siemens TALON TC Compact (BACnet):

Before V3.5.3 is affected.

Siemens TALON TC Modular (BACnet):

Before V3.5.3 is affected.

Exploit Probability

EPSS

0.35%

Percentile

56.76%