CVE-2019-10936

Description

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Category

7.5
CVSS
Severity: High
CVSS 3.1 •
CVSS 2.0 •
EPSS 1.99% Top 20%
Vendor Advisory siemens.com
Affected: Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Affected: Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
Affected: Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
Affected: Siemens SIMATIC CFU PA
Affected: Siemens SIMATIC ET 200AL IM 157-1 PN
Affected: Siemens SIMATIC ET 200M (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN BA
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN HF
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN ST
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN ST
Affected: Siemens SIMATIC ET 200pro IM 154-3 PN HF
Affected: Siemens SIMATIC ET 200pro IM 154-4 PN HF
Affected: Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU
Affected: Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU
Affected: Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU
Affected: Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU
Affected: Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN BA
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HS
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF
Affected: Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN: IO-Link Master
Affected: Siemens SIMATIC ET200S (incl. SIPLUS variants)
Affected: Siemens SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)
Affected: Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Affected: Siemens SIMATIC HMI KTP Mobile Panels
Affected: Siemens SIMATIC PN/PN Coupler
Affected: Siemens SIMATIC PROFINET Driver
Affected: Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Affected: Siemens SIMATIC S7-1500 Software Controller
Affected: Siemens SIMATIC S7-300 CPU 314C-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315F-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315T-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317F-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317T-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 319-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 319F-3 PN/DP
Affected: Siemens SIMATIC S7-400 CPU 412-2 PN V7
Affected: Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC TDC CP51M1
Affected: Siemens SIMATIC TDC CPU555
Affected: Siemens SIMATIC WinAC RTX 2010
Affected: Siemens SIMATIC WinAC RTX F 2010
Affected: Siemens SINAMICS DCM
Affected: Siemens SINAMICS DCP
Affected: Siemens SINAMICS G110M V4.7 PN Control Unit
Affected: Siemens SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)
Affected: Siemens SINAMICS G130 V4.7 Control Unit
Affected: Siemens SINAMICS G150 Control Unit
Affected: Siemens SINAMICS GH150 V4.7 Control Unit
Affected: Siemens SINAMICS GL150 V4.7 Control Unit
Affected: Siemens SINAMICS GM150 V4.7 Control Unit
Affected: Siemens SINAMICS S110 Control Unit
Affected: Siemens SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)
Affected: Siemens SINAMICS S150 Control Unit
Affected: Siemens SINAMICS SL150 V4.7 Control Unit
Affected: Siemens SINAMICS SM120 V4.7 Control Unit
Affected: Siemens SINUMERIK 828D
Affected: Siemens SINUMERIK 840D sl
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
Affected: Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU
Affected: Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
Affected: Siemens SIPLUS NET PN/PN Coupler
Affected: Siemens SIPLUS S7-300 CPU 314C-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 315-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 315F-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 317-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 317F-2 PN/DP
Affected: Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7
Affected: Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7
Published at:
Updated at:

References

Link Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf vendor advisory
https://cert-portal.siemens.com/productcert/html/ssa-473245.html

Frequently Asked Questions

What is the severity of CVE-2019-10936?
CVE-2019-10936 has been scored as a high severity vulnerability.
How to fix CVE-2019-10936?
To fix CVE-2019-10936, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2019-10936 being actively exploited in the wild?
It is possible that CVE-2019-10936 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-10936?
CVE-2019-10936 affects Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, Siemens SIMATIC CFU PA, Siemens SIMATIC ET 200AL IM 157-1 PN, Siemens SIMATIC ET 200M (incl. SIPLUS variants), Siemens SIMATIC ET 200MP IM 155-5 PN BA, Siemens SIMATIC ET 200MP IM 155-5 PN HF, Siemens SIMATIC ET 200MP IM 155-5 PN ST, Siemens SIMATIC ET 200MP IM 155-5 PN ST, Siemens SIMATIC ET 200pro IM 154-3 PN HF, Siemens SIMATIC ET 200pro IM 154-4 PN HF, Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU, Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU, Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU, Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU, Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU, Siemens SIMATIC ET 200SP IM 155-6 PN BA, Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), Siemens SIMATIC ET 200SP IM 155-6 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN HS, Siemens SIMATIC ET 200SP IM 155-6 PN ST, Siemens SIMATIC ET 200SP IM 155-6 PN ST, Siemens SIMATIC ET 200SP IM 155-6 PN ST BA, Siemens SIMATIC ET 200SP IM 155-6 PN ST BA, Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF, Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF, Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12, Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN: IO-Link Master, Siemens SIMATIC ET200S (incl. SIPLUS variants), Siemens SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants), Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants), Siemens SIMATIC HMI KTP Mobile Panels, Siemens SIMATIC PN/PN Coupler, Siemens SIMATIC PROFINET Driver, Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), Siemens SIMATIC S7-1500 Software Controller, Siemens SIMATIC S7-300 CPU 314C-2 PN/DP, Siemens SIMATIC S7-300 CPU 315-2 PN/DP, Siemens SIMATIC S7-300 CPU 315F-2 PN/DP, Siemens SIMATIC S7-300 CPU 315T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317-2 PN/DP, Siemens SIMATIC S7-300 CPU 317F-2 PN/DP, Siemens SIMATIC S7-300 CPU 317T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP, Siemens SIMATIC S7-300 CPU 319-3 PN/DP, Siemens SIMATIC S7-300 CPU 319F-3 PN/DP, Siemens SIMATIC S7-400 CPU 412-2 PN V7, Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7, Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), Siemens SIMATIC TDC CP51M1, Siemens SIMATIC TDC CPU555, Siemens SIMATIC WinAC RTX 2010, Siemens SIMATIC WinAC RTX F 2010, Siemens SINAMICS DCM, Siemens SINAMICS DCP, Siemens SINAMICS G110M V4.7 PN Control Unit, Siemens SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants), Siemens SINAMICS G130 V4.7 Control Unit, Siemens SINAMICS G150 Control Unit, Siemens SINAMICS GH150 V4.7 Control Unit, Siemens SINAMICS GL150 V4.7 Control Unit, Siemens SINAMICS GM150 V4.7 Control Unit, Siemens SINAMICS S110 Control Unit, Siemens SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), Siemens SINAMICS S150 Control Unit, Siemens SINAMICS SL150 V4.7 Control Unit, Siemens SINAMICS SM120 V4.7 Control Unit, Siemens SINUMERIK 828D, Siemens SINUMERIK 840D sl, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, Siemens SIPLUS ET 200MP IM 155-5 PN ST, Siemens SIPLUS ET 200MP IM 155-5 PN ST, Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU, Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST, Siemens SIPLUS ET 200SP IM 155-6 PN ST, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, Siemens SIPLUS NET PN/PN Coupler, Siemens SIPLUS S7-300 CPU 314C-2 PN/DP, Siemens SIPLUS S7-300 CPU 315-2 PN/DP, Siemens SIPLUS S7-300 CPU 315F-2 PN/DP, Siemens SIPLUS S7-300 CPU 317-2 PN/DP, Siemens SIPLUS S7-300 CPU 317F-2 PN/DP, Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7, Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.