CVE-2019-10923 : An attacker with network access to an affected product may cause a denial of ser

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.

Published 2019-10-10 14:15:15

Updated 2024-09-10 10:15:03

Source Siemens AG

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2019-10923

Siemens » Simatic S7-300 Cpu Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu » Version: N/A
Siemens » Simatic Et 200ecopn Firmware
cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Et 200ecopn » Version: N/A
Siemens » Simatic Et 200m Firmware
cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Et 200m » Version: N/A
Siemens » Simatic Et 200s Firmware
cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Et 200s » Version: N/A
Siemens » Dk Standard Ethernet Controller Firmware
Versions before (<) 4.1.1
cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Dk Standard Ethernet Controller » Version: N/A
Siemens » Dk Standard Ethernet Controller Firmware » Version: 4.1.1
cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Dk Standard Ethernet Controller » Version: N/A
Siemens » Dk Standard Ethernet Controller Firmware » Version: 4.1.1 Update P4
cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:p4:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Dk Standard Ethernet Controller » Version: N/A
Siemens » Sinamics Dcm Firmware
Versions before (<) 1.5
cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Dcm » Version: N/A
Siemens » Sinamics Dcm Firmware » Version: 1.5
cpe:2.3:o:siemens:sinamics_dcm_firmware:1.5:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Dcm » Version: N/A
Siemens » Sinamics Dcp Firmware
Versions before (<) 1.3
cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Dcp » Version: N/A
Siemens » Sinamics G110m Firmware
Versions before (<) 4.7
cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G110m » Version: N/A
Siemens » Sinamics G110m Firmware » Version: 4.7
cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G110m » Version: N/A
Siemens » Sinamics G130 Firmware
Versions before (<) 4.7
cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G130 » Version: N/A
Siemens » Sinamics G130 Firmware » Version: 4.7
cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G130 » Version: N/A
Siemens » Sinamics G150 Firmware
Versions before (<) 4.8
cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G150 » Version: N/A
Siemens » Sinamics S120 Firmware
Versions before (<) 4.7
cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics S120 » Version: N/A
Siemens » Sinamics S120 Firmware » Version: 4.7
cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics S120 » Version: N/A
Siemens » Sinamics S150 Firmware
Versions before (<) 4.8
cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics S150 » Version: N/A
Siemens » Simotion Firmware
cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simotion » Version: N/A
Siemens » Cp1604 Firmware
Versions before (<) 2.8
cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Cp1604 » Version: N/A
Siemens » Cp1616 Firmware
Versions before (<) 2.8
cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Cp1616 » Version: N/A
Siemens » Scalance X-200irt Firmware
Versions before (<) 5.2.1
cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Scalance X-200irt » Version: N/A
Siemens » Ek-ertec 200 Firmware
Versions before (<) 4.5.0
cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ek-ertec 200 » Version: N/A
Siemens » Ek-ertec 200 Firmware » Version: 4.5.0
cpe:2.3:o:siemens:ek-ertec_200_firmware:4.5.0:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ek-ertec 200 » Version: N/A
Siemens » Simatic Pn/pn Coupler 6es7158-3ad01-0xa0 Firmware
cpe:2.3:o:siemens:simatic_pn\/pn_coupler_6es7158-3ad01-0xa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Pn/pn Coupler 6es7158-3ad01-0xa0 » Version: N/A
Siemens » Simatic S7-300 Cpu 312 Ifm Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_312_ifm_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 312 Ifm » Version: N/A
Siemens » Simatic S7-300 Cpu 313 Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_313_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 313 » Version: N/A
Siemens » Simatic S7-300 Cpu 314 Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 314 » Version: N/A
Siemens » Simatic S7-300 Cpu 314 Ifm Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_314_ifm_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 314 Ifm » Version: N/A
Siemens » Simatic S7-300 Cpu 315 Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_315_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 315 » Version: N/A
Siemens » Simatic S7-300 Cpu 315-2 Dp Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 315-2 Dp » Version: N/A
Siemens » Simatic S7-300 Cpu 316-2 Dp Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_316-2_dp_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 316-2 Dp » Version: N/A
Siemens » Simatic S7-300 Cpu 318-2 Firmware
Versions before (<) 3.3.17
cpe:2.3:o:siemens:simatic_s7-300_cpu_318-2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 318-2 » Version: N/A
Siemens » Simatic S7-400 V6 Firmware
cpe:2.3:o:siemens:simatic_s7-400_v6_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-400 V6 » Version: N/A
Siemens » Simatic S7-400 Pn V7 Firmware
cpe:2.3:o:siemens:simatic_s7-400_pn_v7_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-400 Pn V7 » Version: N/A
Siemens » Simatic S7-400 Dp V7 Firmware
cpe:2.3:o:siemens:simatic_s7-400_dp_v7_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-400 Dp V7 » Version: N/A
Siemens » Sinamics G120 Firmware
Versions before (<) 4.7
cpe:2.3:o:siemens:sinamics_g120_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G120 » Version: N/A
Siemens » Sinamics G120 Firmware » Version: 4.7
cpe:2.3:o:siemens:sinamics_g120_firmware:4.7:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics G120 » Version: N/A
Siemens » Sinamics Gh150 Firmware
Versions before (<) 4.8
cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Gh150 » Version: N/A
Siemens » Sinamics Gh150 Firmware » Version: 4.8
cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Gh150 » Version: N/A
Siemens » Sinamics Gl150 Firmware
Versions before (<) 4.8
cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Gl150 » Version: N/A
Siemens » Sinamics Gl150 Firmware » Version: 4.8
cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Gl150 » Version: N/A
Siemens » Sinamics Gm150 Firmware
Versions before (<) 4.8
cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Gm150 » Version: N/A
Siemens » Sinamics Gm150 Firmware » Version: 4.8
cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Gm150 » Version: N/A
Siemens » Sinamics S110 Firmware
cpe:2.3:o:siemens:sinamics_s110_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics S110 » Version: N/A
Siemens » Sinamics Sl150 Firmware
Versions before (<) 4.7
cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Sl150 » Version: N/A
Siemens » Sinamics Sl150 Firmware » Version: 4.7
cpe:2.3:o:siemens:sinamics_sl150_firmware:4.7:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Sl150 » Version: N/A
Siemens » Sinamics Sm120 Firmware
cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Sinamics Sm120 » Version: N/A
Siemens » Sinumerik 828d
Versions before (<) 4.8
cpe:2.3:a:siemens:sinumerik_828d:*:*:*:*:*:*:*:*
Matching versions
Siemens » Sinumerik 828d » Version: 4.8 Update SP2
cpe:2.3:a:siemens:sinumerik_828d:4.8:sp2:*:*:*:*:*:*
Matching versions
Siemens » Sinumerik 828d » Version: 4.8 Update SP4
cpe:2.3:a:siemens:sinumerik_828d:4.8:sp4:*:*:*:*:*:*
Matching versions
Siemens » Sinumerik 828d » Version: 4.8
cpe:2.3:a:siemens:sinumerik_828d:4.8:-:*:*:*:*:*:*
Matching versions
Siemens » Sinumerik 828d » Version: 4.8 Update SP1
cpe:2.3:a:siemens:sinumerik_828d:4.8:sp1:*:*:*:*:*:*
Matching versions
Siemens » Sinumerik 828d » Version: 4.8 Update SP3
cpe:2.3:a:siemens:sinumerik_828d:4.8:sp3:*:*:*:*:*:*
Matching versions
Siemens » Sinumerik 840d Sl
cpe:2.3:a:siemens:sinumerik_840d_sl:*:*:*:*:*:*:*:*
Matching versions
Siemens » Ek-ertec 200p Firmware
Versions before (<) 4.5.0
cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ek-ertec 200p » Version: N/A
Siemens » Simatic Winac Rtx (f) Firmware
Versions before (<) 2010
cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Winac Rtx (f) » Version: N/A
Siemens » Simatic Winac Rtx (f) Firmware » Version: 2010
cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:-:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Winac Rtx (f) » Version: N/A
Siemens » Simatic Winac Rtx (f) Firmware » Version: 2010 Update SP1
cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:sp1:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Winac Rtx (f) » Version: N/A
Siemens » Simatic Winac Rtx (f) Firmware » Version: 2010 Update SP2
cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:sp2:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Winac Rtx (f) » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-10923

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-10923

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	Siemens AG
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-10923

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
Assigned by:
- nvd@nist.gov (Secondary)
- productcert@siemens.com (Primary)

References for CVE-2019-10923

https://cert-portal.siemens.com/productcert/html/ssa-349422.html

SSA-349422
https://cert-portal.siemens.com/productcert/pdf/ssa-349422.pdf

Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-10923

Products affected by CVE-2019-10923

Exploit prediction scoring system (EPSS) score for CVE-2019-10923

CVSS scores for CVE-2019-10923

CWE ids for CVE-2019-10923

References for CVE-2019-10923