Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…
Priority LOW 36CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.
Summary
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
Why it matters now
EPSS 0.01401 72nd percentileScored 2026-11-07
Fix Fixed Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (Siemens): V4.5.0SCALANCE X-200IRT family (incl. SIPLUS NET variants) (Siemens): V5.2.1+50 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller | All versions < V4.1.1 Patch 05 | — | No fix listed | CNA |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 | All versions < V4.5.0 Patch 01 | — | No fix listed | CNA |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P | before V4.5.0 | V4.5.0 | Patch available | CNA |
| Siemens | SCALANCE X-200IRT family (incl. SIPLUS NET variants) | before V5.2.1 | V5.2.1 | Patch available | CNA |
| Siemens | SIMATIC CP 1604 | before V2.8 | V2.8 | Patch available | CNA |
| Siemens | SIMATIC CP 1616 | before V2.8 | V2.8 | Patch available | CNA |
| Siemens | SIMATIC ET 200M (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200MP IM 155-5 PN HF | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIMATIC ET 200MP IM 155-5 PN ST | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM 154-3 PN HF | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200pro IM 154-4 PN HF | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200pro IM 154-8 PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM 154-8F PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM 154-8FX PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC ET 200S IM 151-8 PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC ET 200S IM 151-8F PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HF | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST BA | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 4AO U/I 4xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN: IO-Link Master | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET200S (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-300 CPU 314C-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315F-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315T-3 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317F-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317T-3 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317TF-3 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 319-3 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 319F-3 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIMATIC S7-400 CPU 412-2 PN V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
| Siemens | SIMATIC S7-400 CPU 414-3 PN/DP V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
| Siemens | SIMATIC S7-400 CPU 414F-3 PN/DP V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
| Siemens | SIMATIC S7-400 CPU 416-3 PN/DP V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
| Siemens | SIMATIC S7-400 CPU 416F-3 PN/DP V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
| Siemens | SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC WinAC RTX 2010 | All versions < V2010 SP3 | — | No fix listed | CNA |
| Siemens | SIMATIC WinAC RTX F 2010 | All versions < V2010 SP3 | — | No fix listed | CNA |
| Siemens | SIMOTION | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS DCM | All versions < V1.5 HF1 | — | No fix listed | CNA |
| Siemens | SINAMICS DCP | before V1.3 | V1.3 | Patch available | CNA |
| Siemens | SINAMICS G110M V4.7 Control Unit | All versions < V4.7 SP10 HF5 | — | No fix listed | CNA |
| Siemens | SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants) | All versions < V4.7 SP10 HF5 | — | No fix listed | CNA |
| Siemens | SINAMICS G130 | before V4.7 HF29 | V4.7 HF29 | Patch available | CNA |
| Siemens | SINAMICS G150 | before V4.7 HF29 | V4.7 HF29 | Patch available | CNA |
| Siemens | SINAMICS GH150 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS GL150 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS GM150 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S110 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants) | All versions < V4.7 HF34 | — | No fix listed | CNA |
| Siemens | SINAMICS S150 | before V4.7 HF29 | V4.7 HF29 | Patch available | CNA |
| Siemens | SINAMICS SL150 V4.7 Control Unit | All versions < V4.7 HF33 | — | No fix listed | CNA |
| Siemens | SINAMICS SM120 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINUMERIK 828D | All versions < V4.8 SP5 | — | No fix listed | CNA |
| Siemens | SINUMERIK 840D sl | All versions < V4.8 SP5 | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST TX RAIL | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200S IM 151-8 PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIPLUS ET 200S IM 151-8F PN/DP CPU | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | before V4.2.0 | V4.2.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST TX RAIL | before V4.1.0 | V4.1.0 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 314C-2 PN/DP | before V3.3.17 | V3.3.17 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 315-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 315F-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 317-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 317F-2 PN/DP | before V3.2.17 | V3.2.17 | Patch available | CNA |
| Siemens | SIPLUS S7-400 CPU 414-3 PN/DP V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
| Siemens | SIPLUS S7-400 CPU 416-3 PN/DP V7 | before V7.0.3 | V7.0.3 | Patch available | CNA |
- Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller VendorSiemens Affected All versions < V4.1.1 Patch 05 Fixed in — No fix listed CNA
- Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 VendorSiemens Affected All versions < V4.5.0 Patch 01 Fixed in — No fix listed CNA
- Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P VendorSiemens Affected before V4.5.0 Fixed in V4.5.0 Patch available CNA
- SCALANCE X-200IRT family (incl. SIPLUS NET variants) VendorSiemens Affected before V5.2.1 Fixed in V5.2.1 Patch available CNA
- SIMATIC CP 1604 VendorSiemens Affected before V2.8 Fixed in V2.8 Patch available CNA
- SIMATIC CP 1616 VendorSiemens Affected before V2.8 Fixed in V2.8 Patch available CNA
- SIMATIC ET 200M (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET 200MP IM 155-5 PN HF VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIMATIC ET 200MP IM 155-5 PN ST VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIMATIC ET 200pro IM 154-3 PN HF VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC ET 200pro IM 154-4 PN HF VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC ET 200pro IM 154-8 PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC ET 200pro IM 154-8F PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC ET 200pro IM 154-8FX PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC ET 200S IM 151-8 PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC ET 200S IM 151-8F PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC ET 200SP IM 155-6 PN HF VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIMATIC ET 200SP IM 155-6 PN ST VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIMATIC ET 200SP IM 155-6 PN ST BA VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 4AO U/I 4xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN: IO-Link Master VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET200S (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC S7-300 CPU 314C-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 315-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 315F-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 315T-3 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 317-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 317F-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 317T-3 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 317TF-3 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 319-3 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-300 CPU 319F-3 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIMATIC S7-400 CPU 412-2 PN V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
- SIMATIC S7-400 CPU 414-3 PN/DP V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
- SIMATIC S7-400 CPU 414F-3 PN/DP V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
- SIMATIC S7-400 CPU 416-3 PN/DP V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
- SIMATIC S7-400 CPU 416F-3 PN/DP V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
- SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC WinAC RTX 2010 VendorSiemens Affected All versions < V2010 SP3 Fixed in — No fix listed CNA
- SIMATIC WinAC RTX F 2010 VendorSiemens Affected All versions < V2010 SP3 Fixed in — No fix listed CNA
- SIMOTION VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS DCM VendorSiemens Affected All versions < V1.5 HF1 Fixed in — No fix listed CNA
- SINAMICS DCP VendorSiemens Affected before V1.3 Fixed in V1.3 Patch available CNA
- SINAMICS G110M V4.7 Control Unit VendorSiemens Affected All versions < V4.7 SP10 HF5 Fixed in — No fix listed CNA
- SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions < V4.7 SP10 HF5 Fixed in — No fix listed CNA
- SINAMICS G130 VendorSiemens Affected before V4.7 HF29 Fixed in V4.7 HF29 Patch available CNA
- SINAMICS G150 VendorSiemens Affected before V4.7 HF29 Fixed in V4.7 HF29 Patch available CNA
- SINAMICS GH150 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS GL150 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS GM150 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S110 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants) VendorSiemens Affected All versions < V4.7 HF34 Fixed in — No fix listed CNA
- SINAMICS S150 VendorSiemens Affected before V4.7 HF29 Fixed in V4.7 HF29 Patch available CNA
- SINAMICS SL150 V4.7 Control Unit VendorSiemens Affected All versions < V4.7 HF33 Fixed in — No fix listed CNA
- SINAMICS SM120 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINUMERIK 828D VendorSiemens Affected All versions < V4.8 SP5 Fixed in — No fix listed CNA
- SINUMERIK 840D sl VendorSiemens Affected All versions < V4.8 SP5 Fixed in — No fix listed CNA
- SIPLUS ET 200MP IM 155-5 PN HF VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIPLUS ET 200MP IM 155-5 PN HF VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIPLUS ET 200MP IM 155-5 PN ST VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIPLUS ET 200MP IM 155-5 PN ST TX RAIL VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIPLUS ET 200S IM 151-8 PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIPLUS ET 200S IM 151-8F PN/DP CPU VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN HF VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN HF VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL VendorSiemens Affected before V4.2.0 Fixed in V4.2.0 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN ST VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN ST BA VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN ST TX RAIL VendorSiemens Affected before V4.1.0 Fixed in V4.1.0 Patch available CNA
- SIPLUS S7-300 CPU 314C-2 PN/DP VendorSiemens Affected before V3.3.17 Fixed in V3.3.17 Patch available CNA
- SIPLUS S7-300 CPU 315-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIPLUS S7-300 CPU 315F-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIPLUS S7-300 CPU 317-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIPLUS S7-300 CPU 317F-2 PN/DP VendorSiemens Affected before V3.2.17 Fixed in V3.2.17 Patch available CNA
- SIPLUS S7-400 CPU 414-3 PN/DP V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
- SIPLUS S7-400 CPU 416-3 PN/DP V7 VendorSiemens Affected before V7.0.3 Fixed in V7.0.3 Patch available CNA
CPE configurations NVD · 98
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:* | before 2.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:* | before 2.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:* | before 4.1.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:* | 4.1.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:p4:*:*:*:*:*:* | 4.1.1 p4 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:* | before 4.5.0 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:ek-ertec_200_firmware:4.5.0:-:*:*:*:*:*:* | 4.5.0 | Vulnerable | Siemens |
- cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:* Versions before 2.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:* Versions before 2.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:* Versions before 4.1.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:p4:*:*:*:*:*:* Versions 4.1.1 p4 Vulnerable ·Siemens
- cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:ek-ertec_200_firmware:*:*:*:*:*:*:*:* Versions before 4.5.0 Vulnerable ·Siemens
- cpe:2.3:o:siemens:ek-ertec_200_firmware:4.5.0:-:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·Siemens
Show 88 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:ek-ertec_200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:* | before 4.5.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* | before 5.2.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pn\/pn_coupler_6es7158-3ad01-0xa0_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pn\/pn_coupler_6es7158-3ad01-0xa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_312_ifm_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_312_ifm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_313_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_313:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_314_ifm_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_314_ifm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_315_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_315:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_316-2_dp_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_316-2_dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_318-2_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu_318-2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400_v6_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400_v6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400_pn_v7_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400_pn_v7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400_dp_v7_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400_dp_v7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:*:*:*:*:*:*:*:* | before 2010 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:-:*:*:*:*:*:* | 2010 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:sp1:*:*:*:*:*:* | 2010 sp1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:sp2:*:*:*:*:*:* | 2010 sp2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_winac_rtx_\(f\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:* | before 1.5 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_dcm_firmware:1.5:-:*:*:*:*:*:* | 1.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:* | before 1.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:* | before 4.7 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:* | 4.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_g120_firmware:*:*:*:*:*:*:*:* | before 4.7 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_g120_firmware:4.7:-:*:*:*:*:*:* | 4.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* | before 4.7 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:* | 4.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s110_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* | before 4.7 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:* | 4.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:* | before 4.7 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_sl150_firmware:4.7:-:*:*:*:*:*:* | 4.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:sinumerik_828d:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_828d:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_828d:4.8:sp1:*:*:*:*:*:* | 4.8 sp1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_828d:4.8:sp2:*:*:*:*:*:* | 4.8 sp2 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_828d:4.8:sp3:*:*:*:*:*:* | 4.8 sp3 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_828d:4.8:sp4:*:*:*:*:*:* | 4.8 sp4 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sinumerik_840d_sl:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
- cpe:2.3:h:siemens:ek-ertec_200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:ek-ertec_200p_firmware:*:*:*:*:*:*:*:* Versions before 4.5.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:ek-ertec_200p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:scalance_x-200irt_firmware:*:*:*:*:*:*:*:* Versions before 5.2.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:scalance_x-200irt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pn\/pn_coupler_6es7158-3ad01-0xa0_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pn\/pn_coupler_6es7158-3ad01-0xa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_312_ifm_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_312_ifm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_313_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_313:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_314_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_314_ifm_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_314_ifm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_315_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_315:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_315-2_dp_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_316-2_dp_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_316-2_dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_318-2_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu_318-2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400_v6_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400_pn_v7_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400_pn_v7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400_dp_v7_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400_dp_v7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:*:*:*:*:*:*:*:* Versions before 2010 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:-:*:*:*:*:*:* Versions 2010 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:sp1:*:*:*:*:*:* Versions 2010 sp1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_\(f\)_firmware:2010:sp2:*:*:*:*:*:* Versions 2010 sp2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_winac_rtx_\(f\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:* Versions before 1.5 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_dcm_firmware:1.5:-:*:*:*:*:*:* Versions 1.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:* Versions before 4.7 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:* Versions 4.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_g120_firmware:*:*:*:*:*:*:*:* Versions before 4.7 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_g120_firmware:4.7:-:*:*:*:*:*:* Versions 4.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_g120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* Versions before 4.7 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:* Versions 4.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s110_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* Versions before 4.7 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:* Versions 4.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:* Versions before 4.7 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_sl150_firmware:4.7:-:*:*:*:*:*:* Versions 4.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:sinumerik_828d:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_828d:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_828d:4.8:sp1:*:*:*:*:*:* Versions 4.8 sp1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_828d:4.8:sp2:*:*:*:*:*:* Versions 4.8 sp2 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_828d:4.8:sp3:*:*:*:*:*:* Versions 4.8 sp3 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_828d:4.8:sp4:*:*:*:*:*:* Versions 4.8 sp4 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sinumerik_840d_sl:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
Remediation
- Fix · CNA Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (Siemens) Fixed in V4.5.0
- Fix · CNA SCALANCE X-200IRT family (incl. SIPLUS NET variants) (Siemens) Fixed in V5.2.1
- Fix · CNA SIMATIC CP 1604 (Siemens) Fixed in V2.8
- Fix · CNA SIMATIC CP 1616 (Siemens) Fixed in V2.8
- Fix · CNA SIMATIC ET 200MP IM 155-5 PN HF (Siemens) Fixed in V4.2.0
- Fix · CNA SIMATIC ET 200MP IM 155-5 PN ST (Siemens) Fixed in V4.1.0
- Fix · CNA SIMATIC ET 200pro IM 154-8 PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC ET 200pro IM 154-8F PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC ET 200pro IM 154-8FX PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC ET 200S IM 151-8 PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC ET 200S IM 151-8F PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC ET 200SP IM 155-6 PN HF (Siemens) Fixed in V4.2.0
- Fix · CNA SIMATIC ET 200SP IM 155-6 PN ST (Siemens) Fixed in V4.1.0
- Fix · CNA SIMATIC ET 200SP IM 155-6 PN ST BA (Siemens) Fixed in V4.1.0
- Fix · CNA SIMATIC S7-300 CPU 314C-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 315-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 315F-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 315T-3 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 317-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 317F-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 317T-3 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 317TF-3 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 319-3 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-300 CPU 319F-3 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIMATIC S7-400 CPU 412-2 PN V7 (Siemens) Fixed in V7.0.3
- Fix · CNA SIMATIC S7-400 CPU 414-3 PN/DP V7 (Siemens) Fixed in V7.0.3
- Fix · CNA SIMATIC S7-400 CPU 414F-3 PN/DP V7 (Siemens) Fixed in V7.0.3
- Fix · CNA SIMATIC S7-400 CPU 416-3 PN/DP V7 (Siemens) Fixed in V7.0.3
- Fix · CNA SIMATIC S7-400 CPU 416F-3 PN/DP V7 (Siemens) Fixed in V7.0.3
- Fix · CNA SINAMICS DCP (Siemens) Fixed in V1.3
- Fix · CNA SINAMICS G130 (Siemens) Fixed in V4.7 HF29
- Fix · CNA SINAMICS G150 (Siemens) Fixed in V4.7 HF29
- Fix · CNA SINAMICS S150 (Siemens) Fixed in V4.7 HF29
- Fix · CNA SIPLUS ET 200MP IM 155-5 PN HF (Siemens) Fixed in V4.2.0
- Fix · CNA SIPLUS ET 200MP IM 155-5 PN HF (Siemens) Fixed in V4.2.0
- Fix · CNA SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (Siemens) Fixed in V4.2.0
- Fix · CNA SIPLUS ET 200MP IM 155-5 PN ST (Siemens) Fixed in V4.1.0
- Fix · CNA SIPLUS ET 200MP IM 155-5 PN ST TX RAIL (Siemens) Fixed in V4.1.0
- Fix · CNA SIPLUS ET 200S IM 151-8 PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIPLUS ET 200S IM 151-8F PN/DP CPU (Siemens) Fixed in V3.2.17
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN HF (Siemens) Fixed in V4.2.0
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN HF (Siemens) Fixed in V4.2.0
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (Siemens) Fixed in V4.2.0
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN ST (Siemens) Fixed in V4.1.0
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN ST BA (Siemens) Fixed in V4.1.0
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL (Siemens) Fixed in V4.1.0
- Fix · CNA SIPLUS ET 200SP IM 155-6 PN ST TX RAIL (Siemens) Fixed in V4.1.0
- Fix · CNA SIPLUS S7-300 CPU 314C-2 PN/DP (Siemens) Fixed in V3.3.17
- Fix · CNA SIPLUS S7-300 CPU 315-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIPLUS S7-300 CPU 315F-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIPLUS S7-300 CPU 317-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIPLUS S7-300 CPU 317F-2 PN/DP (Siemens) Fixed in V3.2.17
- Fix · CNA SIPLUS S7-400 CPU 414-3 PN/DP V7 (Siemens) Fixed in V7.0.3
- Fix · CNA SIPLUS S7-400 CPU 416-3 PN/DP V7 (Siemens) Fixed in V7.0.3
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Siemens SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 CPU 414-3 PN/DP V7 and 5 more products V7.0.3
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2019-08156 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…Priority MEDIUM 43
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10923
- 2026-10-03 Alias added: GHSA-gm9h-7xvc-jg2f
References
More Siemens Cp1604 Firmware vulnerabilities
- TI-2019-04622 Out-of-bounds read in Siemens SIMATIC CP 1604 CVSS 3.1HIGH 7.5
Sources
- CVE-2019-10923 · CVE Program
- CVE-2019-10923 · NVD
- FIRST EPSS
- GHSA-gm9h-7xvc-jg2f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences