5

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets.

This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Ek-ertec 200p Firmware Version < 4.6
   Siemens ≫ Ek-ertec 200p Version -
Siemens ≫ Ek-ertec 200p Firmware Version 4.6 Update -
   Siemens ≫ Ek-ertec 200p Version -
Siemens ≫ Simatic Cfu Pa Firmware Version < 1.2.0
   Siemens ≫ Simatic Cfu Pa Version -
Siemens ≫ Simatic Pn/pn Coupler Firmware Version < 4.2.1
   Siemens ≫ Simatic Pn/pn Coupler Version -
Siemens ≫ Simatic S7-1200 Cpu Firmware Version < 4.4.0
   Siemens ≫ Simatic S7-1200 Cpu Version -
Siemens ≫ Simatic S7-1500 Cpu Firmware Version < 2.0
   Siemens ≫ Simatic S7-1500 Cpu Version -
Siemens ≫ Simatic S7-1500s Cpu Firmware Version < 2.0
   Siemens ≫ Simatic S7-1500s Cpu Version -
Siemens ≫ Simatic S7-1500t Cpu Firmware Version < 2.0
   Siemens ≫ Simatic S7-1500t Cpu Version -
Siemens ≫ Simatic S7-300 Cpu Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu Version -
Siemens ≫ Simatic S7-300 Cpu 313 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu 313 Version -
Siemens ≫ Simatic S7-300 Cpu 314 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu 314 Version -
Siemens ≫ Simatic S7-300 Cpu 315 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu 315 Version -
Siemens ≫ Simatic S7-400 V6 Firmware Version < 6.0.9
   Siemens ≫ Simatic S7-400 V6 Version -
Siemens ≫ Simatic S7-400h V6 Firmware Version < 6.0.9
   Siemens ≫ Simatic S7-400h V6 Version -
Siemens ≫ Simatic S7-410 V8 Firmware Version < 8.2.2
   Siemens ≫ Simatic S7-410 V8 Version -
Siemens ≫ Simatic Winac Rtx (f) Firmware Version 2010 Update -
   Siemens ≫ Simatic Winac Rtx (f) 2010 Version -
Siemens ≫ Sinamics Dcm Firmware Version < 1.5
   Siemens ≫ Sinamics Dcm Version -
Siemens ≫ Sinamics Dcm Firmware Version 1.5 Update -
   Siemens ≫ Sinamics Dcm Version -
Siemens ≫ Sinamics Dcp Firmware Version < 1.3
   Siemens ≫ Sinamics Dcp Version -
Siemens ≫ Sinamics G110m Firmware Version < 4.7
   Siemens ≫ Sinamics G110m Version -
Siemens ≫ Sinamics G110m Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G110m Version -
Siemens ≫ Sinamics G120 Firmware Version < 4.7
   Siemens ≫ Sinamics G120 Version -
Siemens ≫ Sinamics G120 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G120 Version -
Siemens ≫ Sinamics G130 Firmware Version < 5.2
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G130 Firmware Version 5.2 Update -
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G150 Firmware Version < 5.2
   Siemens ≫ Sinamics G150 Version -
Siemens ≫ Sinamics G150 Firmware Version 5.2 Update -
   Siemens ≫ Sinamics G150 Version -
Siemens ≫ Sinamics Gl150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gl150 Version -
Siemens ≫ Sinamics Gl150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gl150 Version -
Siemens ≫ Sinamics Gm150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gm150 Version -
Siemens ≫ Sinamics Gm150 Firmware Version 4.8 Update -
   Siemens ≫ Sinamics Gm150 Version -
Siemens ≫ Sinamics S120 Firmware Version < 5.2
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S120 Firmware Version 5.2 Update -
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S150 Firmware Version < 5.2
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics S150 Firmware Version 5.2 Update -
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics Sl150 Firmware Version < 4.7
   Siemens ≫ Sinamics Sl150 Version -
Siemens ≫ Sinamics Sl150 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics Sl150 Version -
Siemens ≫ Sinamics Sm120 Firmware Version -
   Siemens ≫ Sinamics Sm120 Version -
Siemens ≫ Sinumerik 828d Version < 4.8
Siemens ≫ Sinumerik 828d Version 4.8 Update -
Siemens ≫ Sinumerik 828d Version 4.8 Update sp1
Siemens ≫ Sinumerik 828d Version 4.8 Update sp2
Siemens ≫ Sinumerik 828d Version 4.8 Update sp3
Siemens ≫ Sinumerik 828d Version 4.8 Update sp4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.07% 0.789
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Siemens 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://cert-portal.siemens.com/productcert/html/ssa-473245.html
https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf
Vendor Advisory