CVE-2019-19300
published 2020-04-14CVE-2019-19300: A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P…
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.50%
71.4th percentile
A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0), SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0), SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0), SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0), SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0), SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0), SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0), SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0), SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0), SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC MICRO-DRIVE PDC, SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0), SIMATIC S7-300 CPU 315-2 PN/DP (6ES731
Affected
77 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | development_evaluation_kits_for_profinet_io_ek-ertec_200 | < * | * |
| siemens | development_evaluation_kits_for_profinet_io_ek-ertec_200p | < * | * |
| siemens | ktk_ate530s | < * | * |
| siemens | sidoor_atd430w | < * | * |
| siemens | sidoor_ate530s_coated | < * | * |
| siemens | sidoor_ate531s | < * | * |
| siemens | simatic_et200mp_im155-5_pn_hf_firmware | <= 4.2 | — |
| siemens | simatic_et200sp_im155-6_pn_2_hf_firmware | <= 4.2 | — |
| siemens | simatic_et200sp_im155-6_pn_hf_firmware | <= 4.2 | — |
| siemens | simatic_et_200al_im_157-1_pn | < * | * |
| siemens | simatic_et_200mp_im_155-5_pn_hf | >= V4.2.0 < * | * |
| siemens | simatic_et_200pro_im_154-8_pn_dp_cpu | < * | * |
| siemens | simatic_et_200pro_im_154-8f_pn_dp_cpu | < * | * |
| siemens | simatic_et_200pro_im_154-8fx_pn_dp_cpu | < * | * |
| siemens | simatic_et_200s_im_151-8_pn_dp_cpu | < * | * |
| siemens | simatic_et_200s_im_151-8f_pn_dp_cpu | < * | * |
| siemens | simatic_et_200sp_im_155-6_mf_hf | < * | * |
| siemens | simatic_et_200sp_im_155-6_pn_2_hf | >= V4.2.0 < * | * |
| siemens | simatic_et_200sp_im_155-6_pn_3_hf | >= V4.2.0 < * | * |
| siemens | simatic_et_200sp_im_155-6_pn_ha | < * | * |
| siemens | simatic_et_200sp_im_155-6_pn_hf | >= V4.2.0 < * | * |
| siemens | simatic_et_200sp_open_controller_cpu_1515sp_pc | < V2.0 | V2.0 |
| siemens | simatic_et_200sp_open_controller_cpu_1515sp_pc2 | < V2.0 | V2.0 |
| siemens | simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware | < 2.0 | 2.0 |
| siemens | simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware | < 2.0 | 2.0 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)
cisa_ics·2021-06-16
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)
ICS Advisory
##
Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D)
Last RevisedJanuary 13, 2023
Alert CodeICSA-20-105-08
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.5
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Siemens
- Equipment: KTK, SIDOOR, SIMATIC, and SINAMICS
- Vulnerability: Uncontrolled Resource Consumption
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-105-08 Siemen
GHSA
GHSA-vwm3-cv6h-hrm3: A vulnerability has been identified in KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S
ghsa_unreviewed·2022-05-24
CVE-2019-19300 [MEDIUM] CWE-400 GHSA-vwm3-cv6h-hrm3: A vulnerability has been identified in KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S
A vulnerability has been identified in KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S (All versions), SIMATIC ET 200SP Interfacemodul IM 155-6 MF HF (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions = V4.2), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC MICRO-DRIVE PDC (All versions), SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) (All versions >= V4.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs a
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-04-14
Published