Skip to content
fr Sign in
7.5 High

CVE-2019-13946 Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple…

Description

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Affected products and versions

Product Affected versions Fixed in
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller Versions not published
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Versions not published
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Versions not published
PROFINET Driver for Controller Versions not published
RUGGEDCOM RM1224 family Versions not published
SCALANCE M804PB Versions not published
SCALANCE M812-1 ADSL-Router Versions not published
SCALANCE M816-1 ADSL-Router Versions not published
SCALANCE M826-2 SHDSL-Router Versions not published
Show the 160 other branches
Product Affected versions Fixed in
SCALANCE M874-2 Versions not published
SCALANCE M874-3 Versions not published
SCALANCE M876-3 Versions not published
SCALANCE M876-3 (ROK) Versions not published
SCALANCE M876-4 (EU) Versions not published
SCALANCE M876-4 (NAM) Versions not published
SCALANCE S615 LAN-Router Versions not published
SCALANCE W-700 IEEE 802.11n family Versions not published
SCALANCE X200-4P IRT Versions not published
SCALANCE X201-3P IRT Versions not published
SCALANCE X201-3P IRT PRO Versions not published
SCALANCE X202-2IRT Versions not published
SCALANCE X202-2P IRT Versions not published
SCALANCE X202-2P IRT PRO Versions not published
SCALANCE X204-2 Versions not published
SCALANCE X204-2FM Versions not published
SCALANCE X204-2LD Versions not published
SCALANCE X204-2LD TS Versions not published
SCALANCE X204-2TS Versions not published
SCALANCE X204IRT Versions not published
SCALANCE X204IRT PRO Versions not published
SCALANCE X206-1 Versions not published
SCALANCE X206-1LD Versions not published
SCALANCE X208 Versions not published
SCALANCE X208PRO Versions not published
SCALANCE X212-2 Versions not published
SCALANCE X212-2LD Versions not published
SCALANCE X216 Versions not published
SCALANCE X224 Versions not published
SCALANCE X302-7 EEC (230V, coated) Versions not published
SCALANCE X302-7 EEC (230V) Versions not published
SCALANCE X302-7 EEC (24V, coated) Versions not published
SCALANCE X302-7 EEC (24V) Versions not published
SCALANCE X302-7 EEC (2x 230V, coated) Versions not published
SCALANCE X302-7 EEC (2x 230V) Versions not published
SCALANCE X302-7 EEC (2x 24V, coated) Versions not published
SCALANCE X302-7 EEC (2x 24V) Versions not published
SCALANCE X304-2FE Versions not published
SCALANCE X306-1LD FE Versions not published
SCALANCE X307-2 EEC (230V, coated) Versions not published
SCALANCE X307-2 EEC (230V) Versions not published
SCALANCE X307-2 EEC (24V, coated) Versions not published
SCALANCE X307-2 EEC (24V) Versions not published
SCALANCE X307-2 EEC (2x 230V, coated) Versions not published
SCALANCE X307-2 EEC (2x 230V) Versions not published
SCALANCE X307-2 EEC (2x 24V, coated) Versions not published
SCALANCE X307-2 EEC (2x 24V) Versions not published
SCALANCE X307-3 Versions not published
SCALANCE X307-3LD Versions not published
SCALANCE X308-2 Versions not published
SCALANCE X308-2LD Versions not published
SCALANCE X308-2LH Versions not published
SCALANCE X308-2LH+ Versions not published
SCALANCE X308-2M Versions not published
SCALANCE X308-2M PoE Versions not published
SCALANCE X308-2M TS Versions not published
SCALANCE X310 Versions not published
SCALANCE X310FE Versions not published
SCALANCE X320-1 FE Versions not published
SCALANCE X320-1-2LD FE Versions not published
SCALANCE X408-2 Versions not published
SCALANCE XB-200 family Versions not published
SCALANCE XC-200 Versions not published
SCALANCE XF-200BA Versions not published
SCALANCE XF201-3P IRT Versions not published
SCALANCE XF202-2P IRT Versions not published
SCALANCE XF204 Versions not published
SCALANCE XF204-2 Versions not published
SCALANCE XF204-2BA IRT Versions not published
SCALANCE XF204IRT Versions not published
SCALANCE XF206-1 Versions not published
SCALANCE XF208 Versions not published
SCALANCE XM-400 family Versions not published
SCALANCE XP-200 Versions not published
SCALANCE XR-300WG family Versions not published
SCALANCE XR-500 family Versions not published
SCALANCE XR324-12M (230V, ports on front) Versions not published
SCALANCE XR324-12M (230V, ports on rear) Versions not published
SCALANCE XR324-12M (24V, ports on front) Versions not published
SCALANCE XR324-12M (24V, ports on rear) Versions not published
SCALANCE XR324-12M TS (24V) Versions not published
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Versions not published
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Versions not published
SCALANCE XR324-4M EEC (24V, ports on front) Versions not published
SCALANCE XR324-4M EEC (24V, ports on rear) Versions not published
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Versions not published
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Versions not published
SCALANCE XR324-4M EEC (2x 24V, ports on front) Versions not published
SCALANCE XR324-4M EEC (2x 24V, ports on rear) Versions not published
SCALANCE XR324-4M PoE (230V, ports on front) Versions not published
SCALANCE XR324-4M PoE (230V, ports on rear) Versions not published
SCALANCE XR324-4M PoE (24V, ports on front) Versions not published
SCALANCE XR324-4M PoE (24V, ports on rear) Versions not published
SCALANCE XR324-4M PoE TS (24V, ports on front) Versions not published
SIMATIC CP 1616 and CP 1604 Versions not published
SIMATIC CP 343-1 Versions not published
SIMATIC CP 343-1 Advanced Versions not published
SIMATIC CP 343-1 ERPC Versions not published
SIMATIC CP 343-1 Lean Versions not published
SIMATIC CP 443-1 3.3 earliest → < 3.3 3.3
SIMATIC CP 443-1 Advanced 3.3 earliest → < 3.3 3.3
SIMATIC CP 443-1 OPC UA Versions not published
SIMATIC ET 200AL IM 157-1 PN Versions not published
SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants) Versions not published
SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants) Versions not published
SIMATIC ET 200MP IM 155-5 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIMATIC ET 200MP IM 155-5 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIMATIC ET 200pro IM 154-3 PN HF Versions not published
SIMATIC ET 200pro IM 154-4 PN HF Versions not published
SIMATIC ET 200SP IM 155-6 PN BA Versions not published
SIMATIC ET 200SP IM 155-6 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIMATIC ET 200SP IM 155-6 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIMATIC ET 200SP IM 155-6 PN ST BA 4.1 earliest → < 4.1.0 4.1.0
SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 Versions not published
SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 Versions not published
SIMATIC ET200ecoPN, 4AO U/I 4xM12 Versions not published
SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 Versions not published
SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 Versions not published
SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 Versions not published
SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 Versions not published
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 Versions not published
SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 Versions not published
SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Versions not published
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 Versions not published
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 Versions not published
SIMATIC ET200ecoPN: IO-Link Master Versions not published
SIMATIC ET200S (incl. SIPLUS variants) Versions not published
SIMATIC IPC Support, Package for VxWorks Versions not published
SIMATIC MV420 SR-B 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV420 SR-B Body 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV420 SR-P 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV420 SR-P Body 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV440 HR 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV440 SR 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV440 UR 7.0 earliest → < 7.0.6 7.0.6
SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) Versions not published
SIMATIC RF180C Versions not published
SIMATIC RF182C Versions not published
SIMATIC RF600R family Versions not published
SIMOTION C Versions not published
SIMOTION D Versions not published
SIMOTION P Versions not published
SINAMICS DCP Versions not published
SIPLUS ET 200MP IM 155-5 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200MP IM 155-5 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200MP IM 155-5 PN ST TX RAIL 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200SP IM 155-6 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN ST BA 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN ST TX RAIL 4.1 earliest → < 4.1.0 4.1.0
SIPLUS NET CP 343-1 Versions not published
SIPLUS NET CP 343-1 Advanced Versions not published
SIPLUS NET CP 343-1 Lean Versions not published
SIPLUS NET CP 443-1 3.3 earliest → < 3.3 3.3
SIPLUS NET CP 443-1 Advanced 3.3 earliest → < 3.3 3.3
SIPLUS NET SCALANCE X308-2 Versions not published
SOFTNET-IE PNIO Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller

The 7 CVEs of Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller →
CVE-2020-28400 Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… 7.5 High CVE-2019-10923 An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time… 7.5 High CVE-2019-10936 Affected devices improperly handle large amounts of specially crafted UDP packets 7.5 High CVE-2017-12741 Specially crafted packets sent to port 161/udp could cause a denial of service condition 7.5 High
Track this CVE