{"id":"CVE-2019-13940","state":"PUBLISHED","title":"A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pr","description":"A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server\r\nby sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.\r\n\r\nBeyond the web service, no other functions or interfaces are affected by the denial of service condition.","publishedAt":"2020-02-11T15:36:10.000Z","updatedAt":"2024-08-05T00:05:44.018Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","source":"siemens"},"assigner":"siemens","products":["Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU","Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU","Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU","Siemens SIMATIC ET 200S IM151-8 PN/DP CPU","Siemens SIMATIC ET 200S IM151-8F PN/DP CPU","Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)","Siemens SIMATIC S7-300 CPU 314C-2 PN/DP","Siemens SIMATIC S7-300 CPU 315-2 PN/DP","Siemens SIMATIC S7-300 CPU 315F-2 PN/DP","Siemens SIMATIC S7-300 CPU 315T-3 PN/DP","Siemens SIMATIC S7-300 CPU 317-2 PN/DP","Siemens SIMATIC S7-300 CPU 317F-2 PN/DP","Siemens SIMATIC S7-300 CPU 317T-3 PN/DP","Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP","Siemens SIMATIC S7-300 CPU 319-3 PN/DP","Siemens SIMATIC S7-300 CPU 319F-3 PN/DP","Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)","Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)","Siemens SIMATIC WinAC RTX 2010","Siemens SIMATIC WinAC RTX F 2010","Siemens SIPLUS ET 200S IM151-8 PN/DP CPU","Siemens SIPLUS ET 200S IM151-8F PN/DP CPU","Siemens SIPLUS S7-300 CPU 314C-2 PN/DP","Siemens SIPLUS S7-300 CPU 315-2 PN/DP","Siemens SIPLUS S7-300 CPU 315F-2 PN/DP","Siemens SIPLUS S7-300 CPU 317-2 PN/DP","Siemens SIPLUS S7-300 CPU 317F-2 PN/DP"],"affected":[{"vendor":"Siemens","product":"SIMATIC ET 200pro IM154-8 PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200pro IM154-8F PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200pro IM154-8FX PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200S IM151-8 PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200S IM151-8F PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU family (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"All versions < V4.1","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 314C-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 315-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 315F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 315T-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317T-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317TF-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 319-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 319F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinAC RTX 2010","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinAC RTX F 2010","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200S IM151-8 PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200S IM151-8F PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 314C-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 315-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 315F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 317-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 317F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]}],"references":["https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T19:45:27.952Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/13xxx/CVE-2019-13940.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-13940","state":"PUBLISHED","datePublished":"2020-02-11T15:36:10.000Z","dateUpdated":"2024-08-05T00:05:44.018Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2019-07-18T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server\r\nby sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.\r\n\r\nBeyond the web service, no other functions or interfaces are affected by the denial of service condition."}],"affected":[{"vendor":"Siemens","product":"SIMATIC ET 200pro IM154-8 PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200pro IM154-8F PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200pro IM154-8FX PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200S IM151-8 PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200S IM151-8F PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU family (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"All versions < V4.1","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 314C-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 315-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 315F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 315T-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317T-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 317TF-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 319-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-300 CPU 319F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinAC RTX 2010","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinAC RTX F 2010","defaultStatus":"unknown","versions":[{"version":"All versions","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200S IM151-8 PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200S IM151-8F PN/DP CPU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 314C-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 315-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 315F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 317-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-300 CPU 317F-2 PN/DP","defaultStatus":"unknown","versions":[{"version":"All versions < V3.X.17","status":"affected"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","baseScore":5.3,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","lang":"en","description":"CWE-400: Uncontrolled Resource Consumption","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateUpdated":"2023-01-10T11:39:13.999Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T00:05:44.018Z"}}]}}}