CVE-2019-13940

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server
by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.

Beyond the web service, no other functions or interfaces are affected by the denial of service condition.

Se ha identificado una vulnerabilidad en la familia de CPUs SIMATIC S7-1200 (incluidas las variantes SIPLUS) (Todas las versiones anteriores a V4.1), la familia de CPUs SIMATIC S7-300 PN/DP (incluidas las CPUs ET200 relacionadas y las variantes SIPLUS) (Todas las versiones anteriores a V3.X.17 ), familia de CPU SIMATIC S7-400 PN/DP V6 e inferiores (incl. variantes SIPLUS) (Todas las versiones), familia de CPU SIMATIC S7-400 PN/DP V7 (incl. variantes SIPLUS) (Todas las versiones), SIMATIC WinAC RTX (F) 2010 (Todas las versiones). Los dispositivos afectados contienen una vulnerabilidad que podría causar una condición de denegación de servicio del servidor web mediante el envío de peticiones HTTP especialmente diseñadas a los puertos 80/tcp y 443/tcp. La vulnerabilidad de seguridad podría ser explotada por un atacante con acceso a la red de un dispositivo afectado. La explotación exitosa no requiere privilegios del sistema ni interacción del usuario. Un atacante podría utilizar la vulnerabilidad para comprometer la disponibilidad del servidor web del dispositivo. Aparte del servicio web, no hay otras funciones o interfaces afectadas por la condición de denegación de servicio

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-07-18 CVE Reserved
2020-02-11 CVE Published
2023-03-08 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"	S7-1200 Cpu 1211c Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1211c Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1211c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1211c Search vendor "Siemens" for product "S7-1200 Cpu 1211c"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1212c Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1212c Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1212c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1212c Search vendor "Siemens" for product "S7-1200 Cpu 1212c"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1214c Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1214c Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1214c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1214c Search vendor "Siemens" for product "S7-1200 Cpu 1214c"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1215c Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1215c Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1215c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1215c Search vendor "Siemens" for product "S7-1200 Cpu 1215c"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1217c Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1217c Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1217c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1217c Search vendor "Siemens" for product "S7-1200 Cpu 1217c"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1212fc Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1212fc Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1212fc Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1212fc Search vendor "Siemens" for product "S7-1200 Cpu 1212fc"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1214fc Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1214fc Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1214fc Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1214fc Search vendor "Siemens" for product "S7-1200 Cpu 1214fc"	-	-	Safe
Siemens Search vendor "Siemens"	S7-1200 Cpu 1215fc Firmware Search vendor "Siemens" for product "S7-1200 Cpu 1215fc Firmware"	< 4.1 Search vendor "Siemens" for product "S7-1200 Cpu 1215fc Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	S7-1200 Cpu 1215fc Search vendor "Siemens" for product "S7-1200 Cpu 1215fc"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus S7-1200 Firmware Search vendor "Siemens" for product "Siplus S7-1200 Firmware"	< 4.1 Search vendor "Siemens" for product "Siplus S7-1200 Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	Siplus S7-1200 Search vendor "Siemens" for product "Siplus S7-1200"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus Cpu 1211c Firmware Search vendor "Siemens" for product "Siplus Cpu 1211c Firmware"	< 4.1 Search vendor "Siemens" for product "Siplus Cpu 1211c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	Siplus Cpu 1211c Search vendor "Siemens" for product "Siplus Cpu 1211c"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus Cpu 1212c Firmware Search vendor "Siemens" for product "Siplus Cpu 1212c Firmware"	< 4.1 Search vendor "Siemens" for product "Siplus Cpu 1212c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	Siplus Cpu 1212c Search vendor "Siemens" for product "Siplus Cpu 1212c"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus Cpu 1214c Firmware Search vendor "Siemens" for product "Siplus Cpu 1214c Firmware"	<= 4.1 Search vendor "Siemens" for product "Siplus Cpu 1214c Firmware" and version " <= 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	Siplus Cpu 1214c Search vendor "Siemens" for product "Siplus Cpu 1214c"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus Cpu 1215c Firmware Search vendor "Siemens" for product "Siplus Cpu 1215c Firmware"	< 4.1 Search vendor "Siemens" for product "Siplus Cpu 1215c Firmware" and version " < 4.1"	-	Affected	in	Siemens Search vendor "Siemens"	Siplus Cpu 1215c Search vendor "Siemens" for product "Siplus Cpu 1215c"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 319-3 Pn\/dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 319-3 Pn\/dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 319-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 319-3 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 315-2dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 315-2dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 315-2 Pn\/dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Pn\/dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 315-2 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 317-2 Dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 317-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 317-2 Pn\/dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Pn\/dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 317-2 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 319-3 Pn\/dp Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu 319-3 Pn\/dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 319-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 319-3 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 314 Firmware Search vendor "Siemens" for product "Siplus S7-300 Cpu 314 Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 314 Search vendor "Siemens" for product "Siplus S7-300 Cpu 314"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 315-2 Dp Firmware Search vendor "Siemens" for product "Siplus S7-300 Cpu 315-2 Dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 315-2 Dp Search vendor "Siemens" for product "Siplus S7-300 Cpu 315-2 Dp"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 315-2 Pn\/dp Firmware Search vendor "Siemens" for product "Siplus S7-300 Cpu 315-2 Pn\/dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 315-2 Pn\/dp Search vendor "Siemens" for product "Siplus S7-300 Cpu 315-2 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 317-2 Pn\/dp Firmware Search vendor "Siemens" for product "Siplus S7-300 Cpu 317-2 Pn\/dp Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Siplus S7-300 Cpu 317-2 Pn\/dp Search vendor "Siemens" for product "Siplus S7-300 Cpu 317-2 Pn\/dp"	v6 Search vendor "Siemens" for product "Siplus S7-300 Cpu 317-2 Pn\/dp" and version "v6"	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Pn\/dp Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Pn\/dp Cpu Firmware"	*	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Pn\/dp Cpu Search vendor "Siemens" for product "Simatic S7-400 Pn\/dp Cpu"	v7 Search vendor "Siemens" for product "Simatic S7-400 Pn\/dp Cpu" and version "v7"	-	Safe
Siemens Search vendor "Siemens"		Simatic Winac Rtx \(f\) 2010 Search vendor "Siemens" for product "Simatic Winac Rtx \(f\) 2010"				*		-		Affected