NetSight
high7.5

CVE-2019-10953

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions.

Impact

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.

Affected products

VendorProductAffected versions
AbbPm554-Tp-Eth Firmware
All versions
PhoenixcontactIlc 151 Eth Firmware
All versions
Schneider-ElectricModicon M221 Firmware
before 1.10.0.0
Siemens6es7211-1ae40-0xb0 Firmware
All versions
Siemens6es7314-6eh04-0ab0 Firmware
All versions
Siemens6ed1052-1cc01-0ba8 Firmware
All versions
WagoKnx Ip Firmware
All versions
WagoPfc100 Firmware
All versions
WagoEthernet Firmware
All versions
WagoBacnet\/Ip Firmware
All versions

Weakness classification

References