high7.5
CVE-2019-10923
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected …
Impact
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Cp1604 Firmware | before 2.8 |
| Siemens | Cp1616 Firmware | before 2.8 |
| Siemens | Dk Standard Ethernet Controller Firmware | before 4.1.1 Version 4.1.1 |
| Siemens | Ek-Ertec 200 Firmware | before 4.5.0 Version 4.5.0 |
| Siemens | Ek-Ertec 200p Firmware | before 4.5.0 |
| Siemens | Scalance X-200irt Firmware | before 5.2.1 |
| Siemens | Simatic Et 200m Firmware | All versions |
| Siemens | Simatic Et 200s Firmware | All versions |
| Siemens | Simatic Et 200ecopn Firmware | All versions |
| Siemens | Simatic Pn\/Pn Coupler 6es7158-3ad01-0xa0 Firmware | All versions |
| Siemens | Simatic S7-300 Cpu Firmware | before 3.3.17 |
| Siemens | Simatic S7-300 Cpu 312 Ifm Firmware | before 3.3.17 |