CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to…

High7.5EPSS 2.1%

Published: 10 Oct 2019
Updated: 4 Aug 2024
Reserved: 8 Apr 2019
Assigned by: siemens

Description

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Scores

CVSS scores of CVE-2019-10936, by who scored it
Scored by	CVSS	Score	Vector
siemensCNA (assigner)	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
NVDNVD · Modified	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 2.1% · top 19% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

CWE-400: Uncontrolled Resource Consumption (opens in a new tab)All about CWE-400 and its CVEs

Affected products

Siemens · Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- affected < *
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
- affected < *
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
- affected All versions < V4.6 Patch 01
Siemens · SIMATIC CFU PA
- affected < V1.2.0
Siemens · SIMATIC ET 200AL IM 157-1 PN
- affected All versions
Siemens · SIMATIC ET 200M (incl. SIPLUS variants)
- affected All versions
Siemens · SIMATIC ET 200MP IM 155-5 PN BA
- affected < V4.3.0
Siemens · SIMATIC ET 200MP IM 155-5 PN HF
- affected < V4.4.0
Siemens · SIMATIC ET 200MP IM 155-5 PN ST
- affected < *
Siemens · SIMATIC ET 200MP IM 155-5 PN ST
- affected < *
Siemens · SIMATIC ET 200pro IM 154-3 PN HF
- affected < *
Siemens · SIMATIC ET 200pro IM 154-4 PN HF
- affected < *
Siemens · SIMATIC ET 200pro IM 154-8 PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIMATIC ET 200pro IM 154-8F PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIMATIC ET 200pro IM 154-8FX PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIMATIC ET 200S IM 151-8 PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIMATIC ET 200S IM 151-8F PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIMATIC ET 200SP IM 155-6 PN BA
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
- affected All versions < V1.2.1
Siemens · SIMATIC ET 200SP IM 155-6 PN HF
- affected < V4.2.2
Siemens · SIMATIC ET 200SP IM 155-6 PN HS
- affected < V4.0.1
Siemens · SIMATIC ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN/2 HF
- affected < V4.2.2
Siemens · SIMATIC ET 200SP IM 155-6 PN/3 HF
- affected < V4.2.1
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
- affected < V2.0
Siemens · SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 4AO U/I 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN: IO-Link Master
- affected All versions
Siemens · SIMATIC ET200S (incl. SIPLUS variants)
- affected All versions
Siemens · SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)
- affected < *
Siemens · SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
- affected < *
Siemens · SIMATIC HMI KTP Mobile Panels
- affected < *
Siemens · SIMATIC PN/PN Coupler
- affected All versions < V4.2.1
Siemens · SIMATIC PROFINET Driver
- affected All versions < V2.1
Siemens · SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- affected All versions < V4.4.0
Siemens · SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- affected All versions < V2.0
Siemens · SIMATIC S7-1500 Software Controller
- affected All versions < V2.0
Siemens · SIMATIC S7-300 CPU 314C-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 315-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 315F-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 315T-3 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 317-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 317F-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 317T-3 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 317TF-3 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 319-3 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-300 CPU 319F-3 PN/DP
- affected All versions < V3.2.17
Siemens · SIMATIC S7-400 CPU 412-2 PN V7
- affected < V7.0.3
Siemens · SIMATIC S7-400 CPU 414-3 PN/DP V7
- affected < V7.0.3
Siemens · SIMATIC S7-400 CPU 414F-3 PN/DP V7
- affected < V7.0.3
Siemens · SIMATIC S7-400 CPU 416-3 PN/DP V7
- affected < V7.0.3
Siemens · SIMATIC S7-400 CPU 416F-3 PN/DP V7
- affected < V7.0.3
Siemens · SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
- affected < V6.0.9
Siemens · SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
- affected < *
Siemens · SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
- affected All versions < V8.2.2
Siemens · SIMATIC TDC CP51M1
- affected < V1.1.8
Siemens · SIMATIC TDC CPU555
- affected < V1.1.1
Siemens · SIMATIC WinAC RTX 2010
- affected All versions < V2010 SP3
Siemens · SIMATIC WinAC RTX F 2010
- affected All versions < V2010 SP3
Siemens · SINAMICS DCM
- affected All versions < V1.5 HF1
Siemens · SINAMICS DCP
- affected All versions < V1.3
Siemens · SINAMICS G110M V4.7 PN Control Unit
- affected All versions < V4.7 SP10 HF5
Siemens · SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)
- affected All versions < V4.7 SP10 HF5
Siemens · SINAMICS G130 V4.7 Control Unit
- affected All versions < 4.8
Siemens · SINAMICS G150 Control Unit
- affected All versions < 4.8
Siemens · SINAMICS GH150 V4.7 Control Unit
- affected All versions
Siemens · SINAMICS GL150 V4.7 Control Unit
- affected All versions
Siemens · SINAMICS GM150 V4.7 Control Unit
- affected All versions
Siemens · SINAMICS S110 Control Unit
- affected < *
Siemens · SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)
- affected < *
Siemens · SINAMICS S150 Control Unit
- affected All versions < 4.8
Siemens · SINAMICS SL150 V4.7 Control Unit
- affected All versions < V4.7 HF33
Siemens · SINAMICS SM120 V4.7 Control Unit
- affected < *
Siemens · SINUMERIK 828D
- affected All versions < V4.8 SP5
Siemens · SINUMERIK 840D sl
- affected All versions < V4.8 SP6
Siemens · SIPLUS ET 200MP IM 155-5 PN HF
- affected < V4.4.0
Siemens · SIPLUS ET 200MP IM 155-5 PN HF
- affected < V4.4.0
Siemens · SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
- affected < V4.4.0
Siemens · SIPLUS ET 200MP IM 155-5 PN ST
- affected < *
Siemens · SIPLUS ET 200MP IM 155-5 PN ST
- affected < *
Siemens · SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
- affected < *
Siemens · SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
- affected < *
Siemens · SIPLUS ET 200S IM 151-8 PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIPLUS ET 200S IM 151-8F PN/DP CPU
- affected All versions < V3.2.17
Siemens · SIPLUS ET 200SP IM 155-6 PN HF
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN HF
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN HF
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN HF
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN HF TX RAIL
- affected < V4.2.2
Siemens · SIPLUS ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
- affected < *
Siemens · SIPLUS NET PN/PN Coupler
- affected All versions < V4.2.1
Siemens · SIPLUS S7-300 CPU 314C-2 PN/DP
- affected All versions < V3.3.17
Siemens · SIPLUS S7-300 CPU 315-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIPLUS S7-300 CPU 315F-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIPLUS S7-300 CPU 317-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIPLUS S7-300 CPU 317F-2 PN/DP
- affected All versions < V3.2.17
Siemens · SIPLUS S7-400 CPU 414-3 PN/DP V7
- affected < V7.0.3
Siemens · SIPLUS S7-400 CPU 416-3 PN/DP V7
- affected < V7.0.3

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-10936](https://trackcve.app/badge/CVE-2019-10936.svg)](https://trackcve.app/cve/CVE-2019-10936)

Record last updated 4 Aug 2024, 22:40 UTC.