CVE-2019-19300 — Uncontrolled Resource Consumption in Siemens Development Evaluation Kits FOR Profinet IO Ek-ertec 200

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 32.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
77
Siemens Development Evaluation Kits FOR Profinet IO Ek-ertec 200Siemens Development Evaluation Kits FOR Profinet IO Ek-ertec 200pSiemens KTK Ate530s+74 more
Timeline
PublishedApr 14
Latest updateMay 24

Description

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR ATE531S, SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0), SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0), SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0), SIMATIC ET 200eco PN, CM 8x IO…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages77 packages

🔴Vulnerability Details

2
GHSA
GHSA-vwm3-cv6h-hrm3: A vulnerability has been identified in KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S↗2022-05-24
▶
CVEList
CVE-2019-19300: A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTE↗2020-04-14
▶
CVE-2019-19300 — Uncontrolled Resource Consumption | cvebase