Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-13939

A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.1, indicating it requires adjacent network access with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts limited integrity, and availability (service disruption) for affected systems. Impacting 46 products from siemens, from siemens, from siemens and 43 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2020, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2020-01-16T16:15:16.277

Last Modified

2025-06-10T16:15:33.853

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:P/A:P

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

6.5

Impact Score

4.9

Weaknesses

Type: Secondary
CWE-20
Type: Secondary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	siemens	capital_vstar	*	Yes
Application	siemens	nucleus_net	*	Yes
Application	siemens	nucleus_readystart	< 2017.02.2	Yes
Application	siemens	nucleus_safetycert	*	Yes
Application	siemens	nucleus_source_code	*	Yes
Operating System	siemens	nucleus_rtos	*	Yes
Operating System	siemens	apogee_modular_equiment_controller_firmware	< 2.8.2	Yes
Hardware	siemens	apogee_modular_equiment_controller	-	No
Operating System	siemens	apogee_modular_building_controller_firmware	< 2.8.2	Yes
Hardware	siemens	apogee_modular_building_controller	-	No
Operating System	siemens	apogee_pxc_firmware	≤ 2.8.2	Yes
Hardware	siemens	apogee_pxc	-	No
Operating System	siemens	desigo_pxc_firmware	≥ 2.3	Yes
Hardware	siemens	desigo_pxc	-	No
Operating System	siemens	desigo_pxm20_firmware	≥ 2.3	Yes
Hardware	siemens	desigo_pxm20	-	No
Operating System	siemens	simotics_connect_400_firmware	≤ 0.3.0.95	Yes
Hardware	siemens	simotics_connect_400	-	No
Operating System	siemens	talon_tc_firmware	≥ 3.0	Yes
Hardware	siemens	talon_tc	-	No
Operating System	siemens	desigo_pxc00-e.d_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc00-e.d	-	No
Operating System	siemens	desigo_pxc00-u_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc00-u	-	No
Operating System	siemens	desigo_pxc001-e.d_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc001-e.d	-	No
Operating System	siemens	desigo_pxc12-e.d_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc12-e.d	-	No
Operating System	siemens	desigo_pxc22-e.d_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc22-e.d	-	No
Operating System	siemens	desigo_pxc22.1-e.d_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc22.1-e.d	-	No
Operating System	siemens	desigo_pxc36.1-e.d_firmware	< 6.00.327	Yes
Hardware	siemens	desigo_pxc36.1-e.d	-	No
Operating System	siemens	desigopxc50-e.d_firmware	-	Yes
Hardware	siemens	desigopxc50-e.d	-	No
Operating System	siemens	desigopxc64-u_firmware	-	Yes
Hardware	siemens	desigopxc64-u	-	No
Operating System	siemens	desigopxc100-e.d_firmware	-	Yes
Hardware	siemens	desigopxc100-e.d	-	No
Operating System	siemens	desigopxc128-u_firmware	-	Yes
Hardware	siemens	desigopxc128-u	-	No
Operating System	siemens	desigopxc200-e.d_firmware	-	Yes
Hardware	siemens	desigopxc200-e.d	-	No
Operating System	siemens	desigopxm20-e_firmware	-	Yes
Hardware	siemens	desigopxm20-e	-	No

References

https://cert-portal.siemens.com/productcert/html/ssa-162506.html ([email protected])
https://cert-portal.siemens.com/productcert/html/ssa-434032.html ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-162506.pdf Vendor Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-434032.pdf Vendor Advisory ([email protected])
https://us-cert.cisa.gov/ics/advisories/icsa-20-105-06 Third Party Advisory, US Government Resource ([email protected])
https://cert-portal.siemens.com/productcert/html/ssa-162506.html (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/html/ssa-434032.html (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-162506.pdf Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-434032.pdf Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://us-cert.cisa.gov/ics/advisories/icsa-20-105-06 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For siemens's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.