CVE-2019-13946

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-11 · updated 2026-06-17
Weakness: CWE-400

Description

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Affected products

Siemens Dk Standard Ethernet Controller: all versions
Siemens Ek-Ertec 200 Firmware: before 4.5 — fixed in 4.5
Siemens Ek-Ertec 200P Firmware: before 4.6 — fixed in 4.6
Siemens Im 154-3 Pn Hf Firmware: all versions
Siemens Im 154-4 Pn Hf Firmware: all versions
Siemens Profinet Driver: before 2.1 — fixed in 2.1
Siemens Ruggedcom Rm1224 Firmware: before 4.3 — fixed in 4.3
Siemens Scalance M-800 Firmware: before 4.3 — fixed in 4.3
Siemens Scalance S615 Firmware: before 4.3 — fixed in 4.3
Siemens Scalance W700 Ieee 802.11N Firmware: through 6.0.1
Siemens Scalance X-200Irt Firmware: before 5.3 — fixed in 5.3
Siemens Scalance X-300 Firmware: all versions
Siemens Scalance X-400 Firmware: before 6.0 — fixed in 6.0
Siemens Scalance Xb-200 Firmware: before 3.0 — fixed in 3.0
Siemens Scalance Xc-200 Firmware: before 3.0 — fixed in 3.0
Siemens Scalance Xf-200 Firmware: all versions
Siemens Scalance Xf-200Ba Firmware: before 3.0 — fixed in 3.0
Siemens Scalance Xm-400 Firmware: before 6.0 — fixed in 6.0
Siemens Scalance Xp-200 Firmware: before 3.0 — fixed in 3.0
Siemens Scalance Xr-300Wg Firmware: before 3.0 — fixed in 3.0
Siemens Scalance Xr524 Firmware: before 6.0 — fixed in 6.0
Siemens Scalance Xr526 Firmware: before 6.0 — fixed in 6.0
Siemens Scalance Xr528 Firmware: before 6.0 — fixed in 6.0
Siemens Scalance Xr552 Firmware: before 6.0 — fixed in 6.0
Siemens Simatic Cp 1604 Firmware: before 2.8 — fixed in 2.8
Siemens Simatic Cp 1616 Firmware: before 2.8 — fixed in 2.8
Siemens Simatic Cp 343-1 Advanced Firmware: all versions
Siemens Simatic Cp 343-1 Erpc Firmware: all versions
Siemens Simatic Cp 343-1 Firmware: all versions
Siemens Simatic Cp 343-1 Lean Firmware: all versions

How to fix

Upgrade to a fixed version: Siemens Ek-Ertec 200 Firmware 4.5; Siemens Ek-Ertec 200P Firmware 4.6; Siemens Profinet Driver 2.1; Siemens Ruggedcom Rm1224 Firmware 4.3; Siemens Scalance M-800 Firmware 4.3; Siemens Scalance S615 Firmware 4.3; Siemens Scalance X-200Irt Firmware 5.3; Siemens Scalance X-400 Firmware 6.0; Siemens Scalance Xb-200 Firmware 3.0; Siemens Scalance Xc-200 Firmware 3.0; Siemens Scalance Xf-200Ba Firmware 3.0; Siemens Scalance Xm-400 Firmware 6.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-13946 or the next vulnerability affects your stack