CVE-2019-10953

🗓️ 17 Apr 2019 14:02:15Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 88 Views

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - PLCs, multiple versions. DoS vulnerability due to network packet flood

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2019-10953	17 Apr 201915:29	–	attackerkb
Cvelist	CVE-2019-10953	17 Apr 201914:02	–	cvelist
EUVD	EUVD-2019-2667	7 Oct 202500:30	–	euvd
ICS	PLC Cycle Time Influences (Update A)	16 Apr 201900:00	–	ics
NVD	CVE-2019-10953	17 Apr 201915:29	–	nvd
OSV	CVE-2019-10953	17 Apr 201915:29	–	osv
Tenable Nessus	Abb Pm554-tp-eth Uncontrolled Resource Consumption	8 Nov 201900:00	–	nessus
Tenable Nessus	Phoenix Contact PLC Cycle Time Influences Uncontrolled Resource Consumption (CVE-2019-10953)	29 Nov 202400:00	–	nessus
Tenable Nessus	Phoenix Contact PLC Cycle Time Influences Uncontrolled Resource Consumption (CVE-2019-10953)	25 Jan 202300:00	–	nessus
Tenable Nessus	Schneider Electric PLC Cycle Time Influences Uncontrolled Resource Consumption (CVE-2019-10953)	1 Mar 202300:00	–	nessus

NVD

Vulners

Node

abb pm554-tp-eth_firmwareMatch-

AND

abb pm554-tp-ethMatch-

Node

phoenixcontact ilc_151_eth_firmwareMatch-

AND

phoenixcontact ilc_151_ethMatch-

Node

schneider-electric modicon_m221_firmwareRange<1.10.0.0

AND

schneider-electric modicon_m221Match-

Node

siemens 6es7211-1ae40-0xb0_firmwareMatch-

AND

siemens 6es7211-1ae40-0xb0Match-

Node

siemens 6es7314-6eh04-0ab0_firmwareMatch-

AND

siemens 6es7314-6eh04-0ab0Match-

Node

siemens 6ed1052-1cc01-0ba8_firmwareMatch-

AND

siemens 6ed1052-1cc01-0ba8Match-

Node

wago knx_ip_firmwareMatch-

AND

wago knx_ipMatch-

Node

wago pfc100_firmwareMatch-

AND

wago pfc100Match-

Node

wago ethernet_firmwareMatch-

AND

wago ethernetMatch-

Node

wago bacnet/ip_firmwareMatch-

AND

wago bacnet/ipMatch-

[
  {
    "vendor": "ABB",
    "product": "1SAP120600R0071 PM554-TP-ETH",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Phoenix Contact",
    "product": "2700974 ILC 151 ETH",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Phoenix Contact",
    "product": "ILC 191 ETH 2TX",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Schneider Electric",
    "product": "Modicon M221",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "v1.10.0.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "v1.10.0.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Schneider Electric",
    "product": "EcoStruxure Machine Expert – Basic",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "v1.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "v1.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Siemens",
    "product": "6ES7211-1AE40-0XB0 Simatic S7-1211",
    "versions": [
      {
        "status": "unaffected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Siemens",
    "product": "6ES7314-6EH04-0AB0 Simatic S7-314",
    "versions": [
      {
        "status": "unaffected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Siemens",
    "product": "6ED1052-1CC01-0BA8 Logo! 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WAGO",
    "product": "750-889 Controller KNX IP",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WAGO",
    "product": "750-8100 Controller PFC100",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WAGO",
    "product": "750-880 Controller ETH",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WAGO",
    "product": "750-831 Controller BACnet/IP",
    "versions": [
      {
        "status": "affected",
        "version": "Multiple"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-19-106-03
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2019/icsa-19-106-03.json
securityfocus	www.securityfocus.com/bid/108413

17 Jun 2026 02:11Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

EPSS0.03671

SSVC