NetSight
high7.5

CVE-2019-10936

Affected devices improperly handle large amounts of specially crafted UDP packets.

Impact

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Affected products

VendorProductAffected versions
SiemensDk Standard Ethernet Controller Firmware
All versions
SiemensEk-Ertec 200 Firmware
All versions
SiemensEk-Ertec 200p Firmware
before 4.6
Version 4.6
SiemensSimatic Cfu Pa Firmware
before 1.2.0
SiemensSimatic Et 200al Firmware
All versions
SiemensSimatic Et 200m Firmware
All versions
SiemensSimatic Et 200mp Im 155-5 Pn Ba Firmware
before 4.3.0
SiemensSimatic Et 200mp Im 155-5 Pn Hf Firmware
before 4.4.0
SiemensSimatic Et 200mp Im 155-5 Pn St Firmware
All versions
SiemensSimatic Et 200s Firmware
All versions
SiemensSimatic Et 200sp Im 155-6 Pn Ba Firmware
All versions
SiemensSimatic Et 200sp Im 155-6 Pn Ha Firmware
All versions

Weakness classification

References