CVE-2019-10936: Siemens Development/Evaluation Kits for PROFINET IO

Описание

Оригинално описание

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Засегнати продукти

• Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: всички версии
• Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200: всички версии
• Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P: All versions < V4.6 Patch 01
• Siemens SIMATIC CFU PA: преди V1.2.0
• Siemens SIMATIC ET 200AL IM 157-1 PN: All versions
• Siemens SIMATIC ET 200M (incl. SIPLUS variants): All versions
• Siemens SIMATIC ET 200MP IM 155-5 PN BA: преди V4.3.0
• Siemens SIMATIC ET 200MP IM 155-5 PN HF: преди V4.4.0
• Siemens SIMATIC ET 200MP IM 155-5 PN ST: всички версии
• Siemens SIMATIC ET 200MP IM 155-5 PN ST: всички версии
• Siemens SIMATIC ET 200pro IM 154-3 PN HF: всички версии
• Siemens SIMATIC ET 200pro IM 154-4 PN HF: всички версии
• Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU: All versions < V3.2.17
• Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU: All versions < V3.2.17
• Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU: All versions < V3.2.17
• Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU: All versions < V3.2.17
• Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU: All versions < V3.2.17
• Siemens SIMATIC ET 200SP IM 155-6 PN BA: всички версии
• Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants): All versions < V1.2.1
• Siemens SIMATIC ET 200SP IM 155-6 PN HF: преди V4.2.2
• Siemens SIMATIC ET 200SP IM 155-6 PN HS: преди V4.0.1
• Siemens SIMATIC ET 200SP IM 155-6 PN ST: всички версии
• Siemens SIMATIC ET 200SP IM 155-6 PN ST: всички версии
• Siemens SIMATIC ET 200SP IM 155-6 PN ST BA: всички версии
• Siemens SIMATIC ET 200SP IM 155-6 PN ST BA: всички версии
• Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF: преди V4.2.2
• Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF: преди V4.2.1
• Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): преди V2.0
• Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12: All versions
• Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12: All versions
• Siemens SIMATIC ET200ecoPN: IO-Link Master: All versions
• Siemens SIMATIC ET200S (incl. SIPLUS variants): All versions
• Siemens SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants): всички версии
• Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants): всички версии
• Siemens SIMATIC HMI KTP Mobile Panels: всички версии
• Siemens SIMATIC PN/PN Coupler: All versions < V4.2.1
• Siemens SIMATIC PROFINET Driver: All versions < V2.1
• Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions < V4.4.0
• Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions < V2.0
• Siemens SIMATIC S7-1500 Software Controller: All versions < V2.0
• Siemens SIMATIC S7-300 CPU 314C-2 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 315-2 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 315F-2 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 315T-3 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 317-2 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 317F-2 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 317T-3 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 319-3 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-300 CPU 319F-3 PN/DP: All versions < V3.2.17
• Siemens SIMATIC S7-400 CPU 412-2 PN V7: преди V7.0.3
• Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7: преди V7.0.3
• Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7: преди V7.0.3
• Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7: преди V7.0.3
• Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7: преди V7.0.3
• Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): преди V6.0.9
• Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants): всички версии
• Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): All versions < V8.2.2
• Siemens SIMATIC TDC CP51M1: преди V1.1.8
• Siemens SIMATIC TDC CPU555: преди V1.1.1
• Siemens SIMATIC WinAC RTX 2010: All versions < V2010 SP3
• Siemens SIMATIC WinAC RTX F 2010: All versions < V2010 SP3
• Siemens SINAMICS DCM: All versions < V1.5 HF1
• Siemens SINAMICS DCP: All versions < V1.3
• Siemens SINAMICS G110M V4.7 PN Control Unit: All versions < V4.7 SP10 HF5
• Siemens SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants): All versions < V4.7 SP10 HF5
• Siemens SINAMICS G130 V4.7 Control Unit: All versions < 4.8
• Siemens SINAMICS G150 Control Unit: All versions < 4.8
• Siemens SINAMICS GH150 V4.7 Control Unit: All versions
• Siemens SINAMICS GL150 V4.7 Control Unit: All versions
• Siemens SINAMICS GM150 V4.7 Control Unit: All versions
• Siemens SINAMICS S110 Control Unit: всички версии
• Siemens SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants): всички версии
• Siemens SINAMICS S150 Control Unit: All versions < 4.8
• Siemens SINAMICS SL150 V4.7 Control Unit: All versions < V4.7 HF33
• Siemens SINAMICS SM120 V4.7 Control Unit: всички версии
• Siemens SINUMERIK 828D: All versions < V4.8 SP5
• Siemens SINUMERIK 840D sl: All versions < V4.8 SP6
• Siemens SIPLUS ET 200MP IM 155-5 PN HF: преди V4.4.0
• Siemens SIPLUS ET 200MP IM 155-5 PN HF: преди V4.4.0
• Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL: преди V4.4.0
• Siemens SIPLUS ET 200MP IM 155-5 PN ST: всички версии
• Siemens SIPLUS ET 200MP IM 155-5 PN ST: всички версии
• Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL: всички версии
• Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL: всички версии
• Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU: All versions < V3.2.17
• Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU: All versions < V3.2.17
• Siemens SIPLUS ET 200SP IM 155-6 PN HF: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN HF: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN HF: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN HF: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL: преди V4.2.2
• Siemens SIPLUS ET 200SP IM 155-6 PN ST: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST BA: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST BA: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL: всички версии
• Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL: всички версии
• Siemens SIPLUS NET PN/PN Coupler: All versions < V4.2.1
• Siemens SIPLUS S7-300 CPU 314C-2 PN/DP: All versions < V3.3.17
• Siemens SIPLUS S7-300 CPU 315-2 PN/DP: All versions < V3.2.17
• Siemens SIPLUS S7-300 CPU 315F-2 PN/DP: All versions < V3.2.17
• Siemens SIPLUS S7-300 CPU 317-2 PN/DP: All versions < V3.2.17
• Siemens SIPLUS S7-300 CPU 317F-2 PN/DP: All versions < V3.2.17
• Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7: преди V7.0.3
• Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7: преди V7.0.3
• siemens: още 50 продукта, добавени от siemens

  dk_standard_ethernet_controller_firmware, ek-ertec_200_firmware, ek-ertec_200p_firmware, simatic_cfu_pa, simatic_et200ecopn_firmware, simatic_et200s_firmware, simatic_et_200al_firmware, simatic_et_200m_firmware, simatic_et_200mp_firmware, simatic_et_200pro_firmware, simatic_et_200s_firmware, simatic_et_200sp_firmware, simatic_hmi_comfort_outdoor_panels, simatic_pn\/pn_coupler_6es7158-3ad01-0xa0, simatic_profinet_driver, simatic_s7-300_cpu_314_firmware, simatic_s7-300_cpu_315-2_dp_firmware, simatic_s7-300_cpu_315f-2_dp_firmware, simatic_s7-300_cpu_317-2_dp_firmware, simatic_s7-300_cpu_317-2_pn\/dp_firmware, simatic_s7-300_cpu_319-3_pn\/dp_firmware, simatic_s7-400_cpu_412-2_pn, simatic_s7-400_cpu_414-3_pn\/dp, simatic_s7-400_cpu_416-3_pn\/dp, simatic_s7-400_h_v6_firmware, simatic_s7-400_pn\/dp_v6_firmware, simatic_s7-410_cpu_firmware, simatic_s7-1200_cpu, simatic_s7-1500_cpu, simatic_s7-1500_controller, simatic_tdc_cp51m1_firmware, simatic_tdc_cpu555_firmware, simatic_winac_rtx_2010, simatic_winac_rtx_\(f\)_2010, sinamics_dcm, sinamics_dcp, sinamics_g110m, sinamics_g120, sinamics_g130, sinamics_g150, sinamics_gh150, sinamics_gl150, sinamics_gm150, sinamics_s110, sinamics_s120, sinamics_sl150, sinamics_sm120, sinumerik_828d, sinumerik_840d_sl, siplus_s7-300_cpu_314

Вид слабост

• CWE-400 Неконтролирано потребление на ресурси

История

Други уязвимости в Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller

• 6.1CVE-2026-63357
• 6.1CVE-2026-63356
• 6.1CVE-2026-63355
• 9.6CVE-2026-63354
• 9.6CVE-2026-63353

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-10936
• https://nvd.nist.gov/vuln/detail/CVE-2019-10936
• https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf
• https://cert-portal.siemens.com/productcert/html/ssa-473245.html