VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 14, 2020· Updated Aug 5, 2024

CVE-2019-19301

CVE-2019-19301

Description

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Affected products

90
  • Siemens Foundation/Scalance X200 4p Irtcpe-rescue
    Range: All versions < V5.5.0
  • Siemens Foundation/Scalance X201 3p Irtcpe-rescue3 versions
    All versions < V5.5.0+ 2 more
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.5.0
  • Siemens Foundation/Scalance X202 2irtcpe-rescue
    Range: All versions < V5.5.0
  • Siemens Foundation/Scalance X202 2p Irtcpe-rescue3 versions
    All versions < V5.5.0+ 2 more
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.5.0
  • Siemens Foundation/Scalance X204irtcpe-rescue9 versions
    All versions < V5.2.5+ 8 more
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
  • Siemens/SCALANCE X204-2LD TSv5
    Range: All versions < V5.2.5
  • Siemens/SCALANCE X206-1LDv5
    Range: All versions < V5.2.5
  • Siemens/SCALANCE X208PROv5
    Range: All versions < V5.2.5
  • Siemens Foundation/Scalance X 200cpe-rescue
    Range: All versions < V5.2.5
  • Siemens/SCALANCE X212-2LDv5
    Range: All versions < V5.2.5
  • Siemens Foundation/SCALANCE XCM324cpe-rescue
    Range: All versions < V5.2.5
  • Siemens/SCALANCE X302-7 EEC (230V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (230V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (24V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (24V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (2x 230V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (2x 230V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (2x 24V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X302-7 EEC (2x 24V, coated)v5
    Range: All versions < V4.1.4
  • Siemens Foundation/Scalance X308 2mcpe-rescue11 versions
    All versions < V4.1.4+ 10 more
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
    • (no CPE)range: All versions < V4.1.4
  • Siemens/SCALANCE X306-1LD FEv5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (230V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (230V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (24V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (24V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (2x 230V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (2x 230V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (2x 24V)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-2 EEC (2x 24V, coated)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X307-3LDv5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X310FEv5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X320-1-2LD FEv5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE X320-1 FEv5
    Range: All versions < V4.1.4
  • Siemens Foundation/Scalance Xf204irtcpe-rescue5 versions
    All versions < V5.2.5+ 4 more
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.5.0
    • (no CPE)range: All versions < V5.2.5
    • (no CPE)range: All versions < V5.2.5
  • Siemens Foundation/Scalance Xf204 2ba Irt Firmwarecpe-rescue
    Range: All versions < V5.5.0
  • Siemens/SCALANCE XR324-12M (230V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-12M (230V, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-12M (24V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-12M (24V, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens Foundation/Scalance Xr324 12m Ts Firmwarecpe-rescue
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (24V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (24V, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (2x 24V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M EEC (2x 24V, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M PoE (230V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M PoE (230V, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M PoE (24V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M PoE (24V, ports on rear)v5
    Range: All versions < V4.1.4
  • Siemens/SCALANCE XR324-4M PoE TS (24V, ports on front)v5
    Range: All versions < V4.1.4
  • Siemens Foundation/Simatic Cp 343 1 Adv Firmwarecpe-rescue
    Range: All versions
  • Siemens/SIMATIC CP 442-1 RNAv5
    Range: All versions < V1.5.18
  • Siemens Foundation/Simatic Cp 443 1 Firmwarecpe-rescue2 versions
    All versions < V3.3+ 1 more
    • (no CPE)range: All versions < V3.3
    • (no CPE)range: All versions < V1.5.18
  • Siemens Foundation/Simatic Cp 443 1 Adv Firmwarecpe-rescue
    Range: All versions < V3.3
  • Siemens/SIMATIC RF180Cv5
    Range: All versions
  • Siemens/SIMATIC RF182Cv5
    Range: All versions
  • Siemens/SIPLUS NET CP 343-1 Advancedv5
    Range: All versions
  • Siemens/SIPLUS NET CP 443-1v5
    Range: All versions < V3.3
  • Siemens/SIPLUS NET CP 443-1 Advancedv5
    Range: All versions < V3.3
  • Siemens/SIPLUS NET SCALANCE X308-2v5
    Range: All versions < V4.1.4

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.