{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2019-19301", "ASSIGNER": "productcert@siemens.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-400: Uncontrolled Resource Consumption", "cweId": "CWE-400" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Siemens", "product": { "product_data": [ { "product_name": "SCALANCE X200-4P IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X201-3P IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X201-3P IRT PRO", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X202-2IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X202-2P IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X202-2P IRT PRO", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X204-2", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X204-2FM", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X204-2LD", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X204-2LD TS", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X204-2TS", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X204IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X204IRT PRO", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE X206-1", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X206-1LD", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X208", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X208PRO", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X212-2", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X212-2LD", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X216", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X224", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE X302-7 EEC (230V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (230V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (24V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (24V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (2x 230V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (2x 230V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (2x 24V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X302-7 EEC (2x 24V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X304-2FE", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X306-1LD FE", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (230V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (230V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (24V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (24V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (2x 230V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (2x 230V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (2x 24V, coated)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-2 EEC (2x 24V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-3", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X307-3LD", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2LD", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2LH", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2LH+", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2M", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2M PoE", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X308-2M TS", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X310", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X310FE", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X320-1 FE", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X320-1-2LD FE", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE X408-2", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XF201-3P IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE XF202-2P IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE XF204", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE XF204-2", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE XF204-2BA IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE XF204IRT", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.5.0" } ] } }, { "product_name": "SCALANCE XF206-1", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE XF208", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V5.2.5" } ] } }, { "product_name": "SCALANCE XR324-12M (230V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-12M (230V, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-12M (24V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-12M (24V, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-12M TS (24V)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (24V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (24V, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" }, { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M PoE (230V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M PoE (230V, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M PoE (24V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M PoE (24V, ports on rear)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SCALANCE XR324-4M PoE TS (24V, ports on front)", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } }, { "product_name": "SIMATIC CP 343-1 Advanced", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions" } ] } }, { "product_name": "SIMATIC CP 442-1 RNA", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V1.5.18" } ] } }, { "product_name": "SIMATIC CP 443-1", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V3.3" }, { "version_affected": "=", "version_value": "All versions < V3.3" } ] } }, { "product_name": "SIMATIC CP 443-1 Advanced", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V3.3" } ] } }, { "product_name": "SIMATIC CP 443-1 RNA", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V1.5.18" } ] } }, { "product_name": "SIMATIC RF180C", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions" } ] } }, { "product_name": "SIMATIC RF182C", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions" } ] } }, { "product_name": "SIPLUS NET CP 343-1 Advanced", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions" } ] } }, { "product_name": "SIPLUS NET CP 443-1", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V3.3" } ] } }, { "product_name": "SIPLUS NET CP 443-1 Advanced", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V3.3" } ] } }, { "product_name": "SIPLUS NET SCALANCE X308-2", "version": { "version_data": [ { "version_affected": "=", "version_value": "All versions < V4.1.4" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-102233.pdf", "refsource": "MISC", "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-102233.pdf" } ] }, "impact": { "cvss": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C", "baseScore": 7.5, "baseSeverity": "HIGH" } ] } }