CVE-2019-10923

Description

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.

Category

7.5
CVSS
Severity: High
CVSS 3.1 •
CVSS 2.0 •
EPSS 0.47%
Vendor Advisory siemens.com
Affected: Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Affected: Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
Affected: Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
Affected: Siemens SCALANCE X-200IRT family (incl. SIPLUS NET variants)
Affected: Siemens SIMATIC CP 1604
Affected: Siemens SIMATIC CP 1616
Affected: Siemens SIMATIC ET 200M (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN HF
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN ST
Affected: Siemens SIMATIC ET 200pro IM 154-3 PN HF
Affected: Siemens SIMATIC ET 200pro IM 154-4 PN HF
Affected: Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU
Affected: Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU
Affected: Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU
Affected: Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU
Affected: Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN: IO-Link Master
Affected: Siemens SIMATIC ET200S (incl. SIPLUS variants)
Affected: Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
Affected: Siemens SIMATIC S7-300 CPU 314C-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315F-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315T-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317F-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317T-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 319-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 319F-3 PN/DP
Affected: Siemens SIMATIC S7-400 CPU 412-2 PN V7
Affected: Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC WinAC RTX 2010
Affected: Siemens SIMATIC WinAC RTX F 2010
Affected: Siemens SIMOTION
Affected: Siemens SINAMICS DCM
Affected: Siemens SINAMICS DCP
Affected: Siemens SINAMICS G110M V4.7 Control Unit
Affected: Siemens SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants)
Affected: Siemens SINAMICS G130
Affected: Siemens SINAMICS G150
Affected: Siemens SINAMICS GH150 V4.7 Control Unit
Affected: Siemens SINAMICS GL150 V4.7 Control Unit
Affected: Siemens SINAMICS GM150 V4.7 Control Unit
Affected: Siemens SINAMICS S110 Control Unit
Affected: Siemens SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants)
Affected: Siemens SINAMICS S150
Affected: Siemens SINAMICS SL150 V4.7 Control Unit
Affected: Siemens SINAMICS SM120 V4.7 Control Unit
Affected: Siemens SINUMERIK 828D
Affected: Siemens SINUMERIK 840D sl
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
Affected: Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU
Affected: Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
Affected: Siemens SIPLUS S7-300 CPU 314C-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 315-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 315F-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 317-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 317F-2 PN/DP
Affected: Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7
Affected: Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7
Published at:
Updated at:

References

Link Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf vendor advisory
https://cert-portal.siemens.com/productcert/html/ssa-349422.html

Frequently Asked Questions

What is the severity of CVE-2019-10923?
CVE-2019-10923 has been scored as a high severity vulnerability.
How to fix CVE-2019-10923?
To fix CVE-2019-10923, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2019-10923 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2019-10923 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-10923?
CVE-2019-10923 affects Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, Siemens SCALANCE X-200IRT family (incl. SIPLUS NET variants), Siemens SIMATIC CP 1604, Siemens SIMATIC CP 1616, Siemens SIMATIC ET 200M (incl. SIPLUS variants), Siemens SIMATIC ET 200MP IM 155-5 PN HF, Siemens SIMATIC ET 200MP IM 155-5 PN ST, Siemens SIMATIC ET 200pro IM 154-3 PN HF, Siemens SIMATIC ET 200pro IM 154-4 PN HF, Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU, Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU, Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU, Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU, Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU, Siemens SIMATIC ET 200SP IM 155-6 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN ST, Siemens SIMATIC ET 200SP IM 155-6 PN ST BA, Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12, Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN: IO-Link Master, Siemens SIMATIC ET200S (incl. SIPLUS variants), Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), Siemens SIMATIC S7-300 CPU 314C-2 PN/DP, Siemens SIMATIC S7-300 CPU 315-2 PN/DP, Siemens SIMATIC S7-300 CPU 315F-2 PN/DP, Siemens SIMATIC S7-300 CPU 315T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317-2 PN/DP, Siemens SIMATIC S7-300 CPU 317F-2 PN/DP, Siemens SIMATIC S7-300 CPU 317T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP, Siemens SIMATIC S7-300 CPU 319-3 PN/DP, Siemens SIMATIC S7-300 CPU 319F-3 PN/DP, Siemens SIMATIC S7-400 CPU 412-2 PN V7, Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7, Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), Siemens SIMATIC WinAC RTX 2010, Siemens SIMATIC WinAC RTX F 2010, Siemens SIMOTION, Siemens SINAMICS DCM, Siemens SINAMICS DCP, Siemens SINAMICS G110M V4.7 Control Unit, Siemens SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants), Siemens SINAMICS G130, Siemens SINAMICS G150, Siemens SINAMICS GH150 V4.7 Control Unit, Siemens SINAMICS GL150 V4.7 Control Unit, Siemens SINAMICS GM150 V4.7 Control Unit, Siemens SINAMICS S110 Control Unit, Siemens SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants), Siemens SINAMICS S150, Siemens SINAMICS SL150 V4.7 Control Unit, Siemens SINAMICS SM120 V4.7 Control Unit, Siemens SINUMERIK 828D, Siemens SINUMERIK 840D sl, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, Siemens SIPLUS ET 200MP IM 155-5 PN ST, Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU, Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, Siemens SIPLUS S7-300 CPU 314C-2 PN/DP, Siemens SIPLUS S7-300 CPU 315-2 PN/DP, Siemens SIPLUS S7-300 CPU 315F-2 PN/DP, Siemens SIPLUS S7-300 CPU 317-2 PN/DP, Siemens SIPLUS S7-300 CPU 317F-2 PN/DP, Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7, Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.