Denial of service in Siemens SCALANCE and SIMATIC
| Risk | Medium |
| Patch available | NO |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2019-19301 |
| CWE-ID | CWE-400 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
SCALANCE X-200 Hardware solutions / Routers & switches, VoIP, GSM, etc SCALANCE X-200 IRT Hardware solutions / Routers & switches, VoIP, GSM, etc SCALANCE X-300 Hardware solutions / Routers & switches, VoIP, GSM, etc SIMATIC RF180C Hardware solutions / Routers & switches, VoIP, GSM, etc SIMATIC RF182C Hardware solutions / Routers & switches, VoIP, GSM, etc SIMATIC CP 443-1 Standard Server applications / SCADA systems SIMATIC CP 443-1 Advanced Server applications / SCADA systems |
| Vendor | Siemens |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Resource exhaustion
EUVDB-ID: #VU26963
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2019-19301
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the VxWorks-based Profinet TCP stack can be forced to make resource-intense calls for every incoming packet. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsSCALANCE X-200: All versions
SCALANCE X-200 IRT: All versions
SCALANCE X-300: All versions
SIMATIC CP 443-1 Standard: All versions
SIMATIC CP 443-1 Advanced: All versions
SIMATIC RF180C: All versions
SIMATIC RF182C: All versions
CPE2.3- cpe:2.3:h:siemens:scalance_x-200:*:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_x-200_irt:*:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:scalance_x-300:*:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:simatic_cp_443-1_standard:*:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:simatic_cp_443-1_advanced:*:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:simatic_rf180c:*:*:*:*:*:*:*:*
- cpe:2.3:h:siemens:simatic_rf182c:*:*:*:*:*:*:*:*
https://cert-portal.siemens.com/productcert/pdf/ssa-102233.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
