cvelist/2019/10xxx/CVE-2019-10936.json
2024-07-09 13:00:35 +00:00

1278 lines
62 KiB
JSON

{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2019-10936",
"ASSIGNER": "productcert@siemens.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Affected devices improperly handle large amounts of specially crafted UDP packets.\r\n\r\nThis could allow an unauthenticated remote attacker to trigger a denial of service condition."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-400: Uncontrolled Resource Consumption",
"cweId": "CWE-400"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Siemens",
"product": {
"product_data": [
{
"product_name": "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.6 Patch 01"
}
]
}
},
{
"product_name": "SIMATIC CFU PA",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V1.2.0"
}
]
}
},
{
"product_name": "SIMATIC ET 200AL IM 157-1 PN",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET 200M (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET 200MP IM 155-5 PN BA",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.3.0"
}
]
}
},
{
"product_name": "SIMATIC ET 200MP IM 155-5 PN HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.4.0"
}
]
}
},
{
"product_name": "SIMATIC ET 200MP IM 155-5 PN ST",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC ET 200pro IM 154-3 PN HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC ET 200pro IM 154-4 PN HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC ET 200pro IM 154-8 PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC ET 200pro IM 154-8F PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC ET 200pro IM 154-8FX PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC ET 200S IM 151-8 PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC ET 200S IM 151-8F PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN BA",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V1.2.1"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.2.2"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN HS",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.0.1"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN ST",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN ST BA",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN/2 HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.2.2"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP IM 155-6 PN/3 HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.2.1"
}
]
}
},
{
"product_name": "SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V2.0"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 4AO U/I 4xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200ecoPN: IO-Link Master",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC ET200S (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC HMI KTP Mobile Panels",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC PN/PN Coupler",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.2.1"
}
]
}
},
{
"product_name": "SIMATIC PROFINET Driver",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V2.1"
}
]
}
},
{
"product_name": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.4.0"
}
]
}
},
{
"product_name": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V2.0"
}
]
}
},
{
"product_name": "SIMATIC S7-1500 Software Controller",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V2.0"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 314C-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 315-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 315F-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 315T-3 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 317-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 317F-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 317T-3 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 317TF-3 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 319-3 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-300 CPU 319F-3 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIMATIC S7-400 CPU 412-2 PN V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
},
{
"product_name": "SIMATIC S7-400 CPU 414-3 PN/DP V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
},
{
"product_name": "SIMATIC S7-400 CPU 414F-3 PN/DP V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
},
{
"product_name": "SIMATIC S7-400 CPU 416-3 PN/DP V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
},
{
"product_name": "SIMATIC S7-400 CPU 416F-3 PN/DP V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
},
{
"product_name": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V6.0.9"
}
]
}
},
{
"product_name": "SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V8.2.2"
}
]
}
},
{
"product_name": "SIMATIC TDC CP51M1",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V1.1.8"
}
]
}
},
{
"product_name": "SIMATIC TDC CPU555",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V1.1.1"
}
]
}
},
{
"product_name": "SIMATIC WinAC RTX 2010",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V2010 SP3"
}
]
}
},
{
"product_name": "SIMATIC WinAC RTX F 2010",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V2010 SP3"
}
]
}
},
{
"product_name": "SINAMICS DCM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V1.5 HF1"
}
]
}
},
{
"product_name": "SINAMICS DCP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V1.3"
}
]
}
},
{
"product_name": "SINAMICS G110M V4.7 PN Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.7 SP10 HF5"
}
]
}
},
{
"product_name": "SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.7 SP10 HF5"
}
]
}
},
{
"product_name": "SINAMICS G130 V4.7 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < 4.8"
}
]
}
},
{
"product_name": "SINAMICS G150 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < 4.8"
}
]
}
},
{
"product_name": "SINAMICS GH150 V4.7 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SINAMICS GL150 V4.7 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SINAMICS GM150 V4.7 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions"
}
]
}
},
{
"product_name": "SINAMICS S110 Control Unit",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants)",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SINAMICS S150 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < 4.8"
}
]
}
},
{
"product_name": "SINAMICS SL150 V4.7 Control Unit",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.7 HF33"
}
]
}
},
{
"product_name": "SINAMICS SM120 V4.7 Control Unit",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SINUMERIK 828D",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.8 SP5"
}
]
}
},
{
"product_name": "SINUMERIK 840D sl",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.8 SP6"
}
]
}
},
{
"product_name": "SIPLUS ET 200MP IM 155-5 PN HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.4.0"
}
]
}
},
{
"product_name": "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.4.0"
}
]
}
},
{
"product_name": "SIPLUS ET 200MP IM 155-5 PN ST",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIPLUS ET 200S IM 151-8 PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIPLUS ET 200S IM 151-8F PN/DP CPU",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN HF",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.2.2"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.2.2"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN HF TX RAIL",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V4.2.2"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN ST",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN ST BA",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "*"
}
]
}
},
{
"product_name": "SIPLUS NET PN/PN Coupler",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V4.2.1"
}
]
}
},
{
"product_name": "SIPLUS S7-300 CPU 314C-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.3.17"
}
]
}
},
{
"product_name": "SIPLUS S7-300 CPU 315-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIPLUS S7-300 CPU 315F-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIPLUS S7-300 CPU 317-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIPLUS S7-300 CPU 317F-2 PN/DP",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "All versions < V3.2.17"
}
]
}
},
{
"product_name": "SIPLUS S7-400 CPU 414-3 PN/DP V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
},
{
"product_name": "SIPLUS S7-400 CPU 416-3 PN/DP V7",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "0",
"version_value": "V7.0.3"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf",
"refsource": "MISC",
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-473245.html",
"refsource": "MISC",
"name": "https://cert-portal.siemens.com/productcert/html/ssa-473245.html"
}
]
},
"impact": {
"cvss": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"baseScore": 7.5,
"baseSeverity": "HIGH"
}
]
}
}