What’s Vulnerable › Vulnerabilities

CVE-2019-10936

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-10 · updated 2026-06-17
• Weakness: CWE-400

Description

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Affected products

• Siemens Dk Standard Ethernet Controller Firmware: all versions
• Siemens Ek-Ertec 200 Firmware: all versions
• Siemens Ek-Ertec 200P Firmware: before 4.6; 4.6 — fixed in 4.6
• Siemens Simatic Cfu Pa Firmware: before 1.2.0 — fixed in 1.2.0
• Siemens Simatic Et 200Al Firmware: all versions
• Siemens Simatic Et 200Ecopn Firmware: all versions
• Siemens Simatic Et 200M Firmware: all versions
• Siemens Simatic Et 200Mp Im 155-5 Pn Ba Firmware: before 4.3.0 — fixed in 4.3.0
• Siemens Simatic Et 200Mp Im 155-5 Pn Hf Firmware: before 4.4.0 — fixed in 4.4.0
• Siemens Simatic Et 200Mp Im 155-5 Pn St Firmware: all versions
• Siemens Simatic Et 200Pro Firmware: all versions
• Siemens Simatic Et 200S Firmware: all versions
• Siemens Simatic Et 200Sp Im 155-6 Pn/2 Hf Firmware: before 4.2.2 — fixed in 4.2.2
• Siemens Simatic Et 200Sp Im 155-6 Pn/3 Hf Firmware: before 4.2.1 — fixed in 4.2.1
• Siemens Simatic Et 200Sp Im 155-6 Pn Ba Firmware: all versions
• Siemens Simatic Et 200Sp Im 155-6 Pn Ha Firmware: all versions
• Siemens Simatic Et 200Sp Im 155-6 Pn Hf Firmware: before 4.2.2 — fixed in 4.2.2
• Siemens Simatic Et 200Sp Im 155-6 Pn Hs Firmware: all versions
• Siemens Simatic Et 200Sp Im 155-6 Pn St Firmware: all versions
• Siemens Simatic Hmi Comfort Outdoor Panels 15" Firmware: all versions
• Siemens Simatic Hmi Comfort Outdoor Panels 7" Firmware: all versions
• Siemens Simatic Hmi Comfort Panels 22" Firmware: all versions
• Siemens Simatic Hmi Comfort Panels 4" Firmware: all versions
• Siemens Simatic Hmi Ktp Mobile Panels Firmware: all versions
• Siemens Simatic Pn/Pn Coupler Firmware: before 4.2.1 — fixed in 4.2.1
• Siemens Simatic Profinet Driver Firmware: before 2.1 — fixed in 2.1
• Siemens Simatic S7-1200 Cpu 1211C Firmware: before 4.4.0 — fixed in 4.4.0
• Siemens Simatic S7-1200 Cpu 1212C Firmware: before 4.4.0 — fixed in 4.4.0
• Siemens Simatic S7-1200 Cpu 1214C Firmware: before 4.4.0 — fixed in 4.4.0
• Siemens Simatic S7-1200 Cpu Firmware: before 4.4.0 — fixed in 4.4.0

How to fix

Upgrade to a fixed version: Siemens Ek-Ertec 200P Firmware 4.6; Siemens Simatic Cfu Pa Firmware 1.2.0; Siemens Simatic Et 200Mp Im 155-5 Pn Ba Firmware 4.3.0; Siemens Simatic Et 200Mp Im 155-5 Pn Hf Firmware 4.4.0; Siemens Simatic Et 200Sp Im 155-6 Pn/2 Hf Firmware 4.2.2; Siemens Simatic Et 200Sp Im 155-6 Pn/3 Hf Firmware 4.2.1; Siemens Simatic Et 200Sp Im 155-6 Pn Hf Firmware 4.2.2; Siemens Simatic Pn/Pn Coupler Firmware 4.2.1; Siemens Simatic Profinet Driver Firmware 2.1; Siemens Simatic S7-1200 Cpu 1211C Firmware 4.4.0; Siemens Simatic S7-1200 Cpu 1212C Firmware 4.4.0; Siemens Simatic S7-1200 Cpu 1214C Firmware 4.4.0. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-473245.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf
• https://cert-portal.siemens.com/productcert/html/ssa-473245.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf

Get alerted when CVE-2019-10936 or the next vulnerability affects your stack