CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in v1.10.0.0, v1.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- ABB 1SAP120600R0071 PM554-TP-ETH
Multiple
- Phoenix Contact 2700974 ILC 151 ETH
Multiple
- Phoenix Contact ILC 191 ETH 2TX
Multiple
- Schneider Electric Modicon M221
fixed in v1.10.0.0
- Schneider Electric EcoStruxure Machine Expert – Basic
fixed in v1.0
- Siemens 6ES7211-1AE40-0XB0 Simatic S7-1211
Version range not reported
- Siemens 6ES7314-6EH04-0AB0 Simatic S7-314
Version range not reported
- Siemens 6ED1052-1CC01-0BA8 Logo! 8
Version range not reported
- WAGO 750-889 Controller KNX IP
Multiple
- WAGO 750-8100 Controller PFC100
Multiple
- WAGO 750-880 Controller ETH
Multiple
- WAGO 750-831 Controller BACnet/IP
Multiple