694
VMScore

CVE-2019-19281

Published: 10/03/2020 Updated: 02/04/2020
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated malicious user to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

siemens simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware

siemens simatic_s7-1500_cpu_1511-1_pn_firmware

siemens simatic_s7-1500_cpu_1513-1_pn_firmware

siemens simatic_s7-1500_cpu_1515-2_pn_firmware

siemens simatic_s7-1500_cpu_1516-3_pn_firmware

siemens simatic_s7-1500_cpu_1516-3_dp_firmware

siemens simatic_s7-1500_cpu_1517-3_pn_firmware

siemens simatic_s7-1500_cpu_1517-3_dp_firmware

siemens simatic_s7-1500_cpu_1518-4_pn_firmware

siemens simatic_s7-1500_cpu_1518-4_dp_firmware

siemens simatic_s7-1500_cpu_1507s_firmware

siemens simatic_s7-1500_cpu_1508s_firmware

siemens simatic_s7-1500_cpu_1507s_f_firmware

siemens simatic_s7-1500_cpu_1508s_f_firmware