Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-13940
HistoryFeb 11, 2020 - 4:15 p.m.

CVE-2019-13940

2020-02-1116:15:14
CWE-400
[email protected]
web.nvd.nist.gov
39
cve-2019-13940
simatic
et 200pro
im154
im151
s7-1200
s7-300
s7-400
winac rtx
siplus
denial of service
web server
http
vulnerability
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server
by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.

Beyond the web service, no other functions or interfaces are affected by the denial of service condition.

Affected configurations

NVD
Node
siemenss7-1200_cpu_1211c_firmwareRange<4.1
AND
siemenss7-1200_cpu_1211cMatch-
Node
siemenss7-1200_cpu_1212c_firmwareRange<4.1
AND
siemenss7-1200_cpu_1212cMatch-
Node
siemenss7-1200_cpu_1214c_firmwareRange<4.1
AND
siemenss7-1200_cpu_1214cMatch-
Node
siemenss7-1200_cpu_1215c_firmwareRange<4.1
AND
siemenss7-1200_cpu_1215cMatch-
Node
siemenss7-1200_cpu_1217c_firmwareRange<4.1
AND
siemenss7-1200_cpu_1217cMatch-
Node
siemenss7-1200_cpu_1212fc_firmwareRange<4.1
AND
siemenss7-1200_cpu_1212fcMatch-
Node
siemenss7-1200_cpu_1214fc_firmwareRange<4.1
AND
siemenss7-1200_cpu_1214fcMatch-
Node
siemenss7-1200_cpu_1215fc_firmwareRange<4.1
AND
siemenss7-1200_cpu_1215fcMatch-
Node
siemenssiplus_s7-1200_firmwareRange<4.1
AND
siemenssiplus_s7-1200Match-
Node
siemenssiplus_cpu_1211c_firmwareRange<4.1
AND
siemenssiplus_cpu_1211cMatch-
Node
siemenssiplus_cpu_1212c_firmwareRange<4.1
AND
siemenssiplus_cpu_1212cMatch-
Node
siemenssiplus_cpu_1214c_firmwareRange≤4.1
AND
siemenssiplus_cpu_1214cMatch-
Node
siemenssiplus_cpu_1215c_firmwareRange<4.1
AND
siemenssiplus_cpu_1215cMatch-
Node
siemenssimatic_s7-300_cpu_319-3_pn\/dp_firmware
AND
siemenssimatic_s7-300_cpu_319-3_pn\/dpMatch-
Node
siemenssimatic_s7-300_cpu_315-2dp_firmware
AND
siemenssimatic_s7-300_cpu_315-2dpMatch-
Node
siemenssimatic_s7-300_cpu_315-2_pn\/dp_firmware
AND
siemenssimatic_s7-300_cpu_315-2_pn\/dpMatch-
Node
siemenssimatic_s7-300_cpu_317-2_dp_firmware
AND
siemenssimatic_s7-300_cpu_317-2_dpMatch-
Node
siemenssimatic_s7-300_cpu_317-2_pn\/dp_firmware
AND
siemenssimatic_s7-300_cpu_317-2_pn\/dpMatch-
Node
siemenssimatic_s7-300_cpu_319-3_pn\/dp_firmware
AND
siemenssimatic_s7-300_cpu_319-3_pn\/dpMatch-
Node
siemenssiplus_s7-300_cpu_314_firmware
AND
siemenssiplus_s7-300_cpu_314Match-
Node
siemenssiplus_s7-300_cpu_315-2_dp_firmware
AND
siemenssiplus_s7-300_cpu_315-2_dpMatch-
Node
siemenssiplus_s7-300_cpu_315-2_pn\/dp_firmware
AND
siemenssiplus_s7-300_cpu_315-2_pn\/dpMatch-
Node
siemenssiplus_s7-300_cpu_317-2_pn\/dp_firmware
AND
siemenssiplus_s7-300_cpu_317-2_pn\/dpMatchv6
Node
siemenssimatic_s7-400_pn\/dp_cpu_firmware
AND
siemenssimatic_s7-400_pn\/dp_cpuMatchv7
Node
siemenssimatic_winac_rtx_\(f\)_2010

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC ET 200pro IM154-8 PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC ET 200pro IM154-8F PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC ET 200pro IM154-8FX PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC ET 200S IM151-8 PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC ET 200S IM151-8F PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions < V4.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 314C-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 315-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 315F-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 315T-3 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 317-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 317F-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 317T-3 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 317TF-3 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 319-3 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-300 CPU 319F-3 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC WinAC RTX 2010",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC WinAC RTX F 2010",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS ET 200S IM151-8 PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS ET 200S IM151-8F PN/DP CPU",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-300 CPU 314C-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-300 CPU 315-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-300 CPU 315F-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-300 CPU 317-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-300 CPU 317F-2 PN/DP",
    "versions": [
      {
        "version": "All versions < V3.X.17",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Related

nessus 2
prion 1
ics 1
cvelist 1
nvd 1
nessus
nessus
Siemens S7-1200 Uncontrolled Resource Consumption
2020-05-27 00:00:00
Siemens SIMATIC S7 Uncontrolled Resource Consumption (CVE-2019-13940)
2022-02-07 00:00:00
prion
prion
Race condition
2020-02-11 16:15:00
ics
ics
Siemens SIMATIC S7 (Update B)
2023-01-13 12:00:00
cvelist
cvelist
CVE-2019-13940
2020-02-11 15:36:10
nvd
nvd
CVE-2019-13940
2020-02-11 16:15:14

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON
Related for CVE-2019-13940
nessus2prion1ics1cvelist1nvd1