7.5

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets.

This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Ek-ertec 200p Firmware Version < 4.6
   Siemens ≫ Ek-ertec 200p Version-
Siemens ≫ Ek-ertec 200p Firmware Version4.6 Update-
   Siemens ≫ Ek-ertec 200p Version-
Siemens ≫ Simatic Cfu Pa Firmware Version < 1.2.0
   Siemens ≫ Simatic Cfu Pa Version-
Siemens ≫ Simatic S7-1200 Cpu Firmware Version < 4.4.0
   Siemens ≫ Simatic S7-1200 Cpu Version-
Siemens ≫ Simatic S7-1500 Cpu Firmware Version < 2.0
   Siemens ≫ Simatic S7-1500 Cpu Version-
Siemens ≫ Simatic S7-300 Cpu Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Cpu Version-
Siemens ≫ Simatic S7-400 V6 Firmware Version < 6.0.9
   Siemens ≫ Simatic S7-400 V6 Version-
Siemens ≫ Simatic S7-400h V6 Firmware Version < 6.0.9
   Siemens ≫ Simatic S7-400h V6 Version-
Siemens ≫ Simatic S7-410 V8 Firmware Version < 8.2.2
   Siemens ≫ Simatic S7-410 V8 Version-
Siemens ≫ Simatic Winac Rtx (f) Firmware Version2010 Update-
Siemens ≫ Sinamics Dcm Firmware Version < 1.5
   Siemens ≫ Sinamics Dcm Version-
Siemens ≫ Sinamics Dcm Firmware Version1.5 Update-
   Siemens ≫ Sinamics Dcm Version-
Siemens ≫ Sinamics Dcp Firmware Version < 1.3
   Siemens ≫ Sinamics Dcp Version-
Siemens ≫ Sinamics G110m Firmware Version < 4.7
   Siemens ≫ Sinamics G110m Version-
Siemens ≫ Sinamics G110m Firmware Version4.7 Update-
   Siemens ≫ Sinamics G110m Version-
Siemens ≫ Sinamics G120 Firmware Version < 4.7
   Siemens ≫ Sinamics G120 Version-
Siemens ≫ Sinamics G120 Firmware Version4.7 Update-
   Siemens ≫ Sinamics G120 Version-
Siemens ≫ Sinamics G130 Firmware Version < 5.2
   Siemens ≫ Sinamics G130 Version-
Siemens ≫ Sinamics G130 Firmware Version5.2 Update-
   Siemens ≫ Sinamics G130 Version-
Siemens ≫ Sinamics G150 Firmware Version < 5.2
   Siemens ≫ Sinamics G150 Version-
Siemens ≫ Sinamics G150 Firmware Version5.2 Update-
   Siemens ≫ Sinamics G150 Version-
Siemens ≫ Sinamics Gl150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gl150 Version-
Siemens ≫ Sinamics Gl150 Firmware Version4.8 Update-
   Siemens ≫ Sinamics Gl150 Version-
Siemens ≫ Sinamics Gm150 Firmware Version < 4.8
   Siemens ≫ Sinamics Gm150 Version-
Siemens ≫ Sinamics Gm150 Firmware Version4.8 Update-
   Siemens ≫ Sinamics Gm150 Version-
Siemens ≫ Sinamics S120 Firmware Version < 5.2
   Siemens ≫ Sinamics S120 Version-
Siemens ≫ Sinamics S120 Firmware Version5.2 Update-
   Siemens ≫ Sinamics S120 Version-
Siemens ≫ Sinamics S150 Firmware Version < 5.2
   Siemens ≫ Sinamics S150 Version-
Siemens ≫ Sinamics S150 Firmware Version5.2 Update-
   Siemens ≫ Sinamics S150 Version-
Siemens ≫ Sinamics Sl150 Firmware Version < 4.7
   Siemens ≫ Sinamics Sl150 Version-
Siemens ≫ Sinamics Sl150 Firmware Version4.7 Update-
   Siemens ≫ Sinamics Sl150 Version-
Siemens ≫ Sinamics Sm120 Firmware Version-
   Siemens ≫ Sinamics Sm120 Version-
Siemens ≫ Sinumerik 828d Version < 4.8
Siemens ≫ Sinumerik 828d Version4.8 Update-
Siemens ≫ Sinumerik 828d Version4.8 Updatesp1
Siemens ≫ Sinumerik 828d Version4.8 Updatesp2
Siemens ≫ Sinumerik 828d Version4.8 Updatesp3
Siemens ≫ Sinumerik 828d Version4.8 Updatesp4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.99% 0.82
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
productcert@siemens.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.