Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-13940

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp. Beyond the web service, no other functions or interfaces are affected by the denial of service condition.

Published

2020-02-11T16:15:14.773

Last Modified

2024-11-21T04:25:44.283

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-400
  • Type: Secondary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens s7-1200_cpu_1211c_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1211c - No
Operating System siemens s7-1200_cpu_1212c_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1212c - No
Operating System siemens s7-1200_cpu_1214c_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1214c - No
Operating System siemens s7-1200_cpu_1215c_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1215c - No
Operating System siemens s7-1200_cpu_1217c_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1217c - No
Operating System siemens s7-1200_cpu_1212fc_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1212fc - No
Operating System siemens s7-1200_cpu_1214fc_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1214fc - No
Operating System siemens s7-1200_cpu_1215fc_firmware < 4.1 Yes
Hardware siemens s7-1200_cpu_1215fc - No
Operating System siemens siplus_s7-1200_firmware < 4.1 Yes
Hardware siemens siplus_s7-1200 - No
Operating System siemens siplus_cpu_1211c_firmware < 4.1 Yes
Hardware siemens siplus_cpu_1211c - No
Operating System siemens siplus_cpu_1212c_firmware < 4.1 Yes
Hardware siemens siplus_cpu_1212c - No
Operating System siemens siplus_cpu_1214c_firmware ≤ 4.1 Yes
Hardware siemens siplus_cpu_1214c - No
Operating System siemens siplus_cpu_1215c_firmware < 4.1 Yes
Hardware siemens siplus_cpu_1215c - No
Operating System siemens simatic_s7-300_cpu_319-3_pn\/dp_firmware * Yes
Hardware siemens simatic_s7-300_cpu_319-3_pn\/dp - No
Operating System siemens simatic_s7-300_cpu_315-2dp_firmware * Yes
Hardware siemens simatic_s7-300_cpu_315-2dp - No
Operating System siemens simatic_s7-300_cpu_315-2_pn\/dp_firmware * Yes
Hardware siemens simatic_s7-300_cpu_315-2_pn\/dp - No
Operating System siemens simatic_s7-300_cpu_317-2_dp_firmware * Yes
Hardware siemens simatic_s7-300_cpu_317-2_dp - No
Operating System siemens simatic_s7-300_cpu_317-2_pn\/dp_firmware * Yes
Hardware siemens simatic_s7-300_cpu_317-2_pn\/dp - No
Operating System siemens simatic_s7-300_cpu_319-3_pn\/dp_firmware * Yes
Hardware siemens simatic_s7-300_cpu_319-3_pn\/dp - No
Operating System siemens siplus_s7-300_cpu_314_firmware * Yes
Hardware siemens siplus_s7-300_cpu_314 - No
Operating System siemens siplus_s7-300_cpu_315-2_dp_firmware * Yes
Hardware siemens siplus_s7-300_cpu_315-2_dp - No
Operating System siemens siplus_s7-300_cpu_315-2_pn\/dp_firmware * Yes
Hardware siemens siplus_s7-300_cpu_315-2_pn\/dp - No
Operating System siemens siplus_s7-300_cpu_317-2_pn\/dp_firmware * Yes
Hardware siemens siplus_s7-300_cpu_317-2_pn\/dp v6 No
Operating System siemens simatic_s7-400_pn\/dp_cpu_firmware * Yes
Hardware siemens simatic_s7-400_pn\/dp_cpu v7 No
Application siemens simatic_winac_rtx_\(f\)_2010 * Yes
References