Uncontrolled resource consumption in ABB 1SAP120600R0071 PM554-TP-ETH
Priority MEDIUM 45CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-400.
Summary
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03461 89th percentileScored 2026-11-07
Fix Fixed Modicon M221 (Schneider Electric): v1.10.0.0EcoStruxure Machine Expert – Basic (Schneider Electric): v1.0+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ABB | 1SAP120600R0071 PM554-TP-ETH | Multiple | — | No fix listed | CNA |
| Phoenix Contact | 2700974 ILC 151 ETH | Multiple | — | No fix listed | CNA |
| Phoenix Contact | ILC 191 ETH 2TX | Multiple | — | No fix listed | CNA |
| Schneider Electric | Modicon M221 | before v1.10.0.0 | v1.10.0.0 | Patch available | CNA |
| Schneider Electric | EcoStruxure Machine Expert – Basic | before v1.0 | v1.0 | Patch available | CNA |
| Siemens | 6ES7211-1AE40-0XB0 Simatic S7-1211 | — | Multiple | Patch available | CNA |
| Siemens | 6ES7314-6EH04-0AB0 Simatic S7-314 | — | Multiple | Patch available | CNA |
| Siemens | 6ED1052-1CC01-0BA8 Logo! 8 | — | Multiple | Patch available | CNA |
| WAGO | 750-889 Controller KNX IP | Multiple | — | No fix listed | CNA |
| WAGO | 750-8100 Controller PFC100 | Multiple | — | No fix listed | CNA |
| WAGO | 750-880 Controller ETH | Multiple | — | No fix listed | CNA |
| WAGO | 750-831 Controller BACnet/IP | Multiple | — | No fix listed | CNA |
- 1SAP120600R0071 PM554-TP-ETH VendorABB Affected Multiple Fixed in — No fix listed CNA
- 2700974 ILC 151 ETH VendorPhoenix Contact Affected Multiple Fixed in — No fix listed CNA
- ILC 191 ETH 2TX VendorPhoenix Contact Affected Multiple Fixed in — No fix listed CNA
- Modicon M221 VendorSchneider Electric Affected before v1.10.0.0 Fixed in v1.10.0.0 Patch available CNA
- EcoStruxure Machine Expert – Basic VendorSchneider Electric Affected before v1.0 Fixed in v1.0 Patch available CNA
- 6ES7211-1AE40-0XB0 Simatic S7-1211 VendorSiemens Affected — Fixed in Multiple Patch available CNA
- 6ES7314-6EH04-0AB0 Simatic S7-314 VendorSiemens Affected — Fixed in Multiple Patch available CNA
- 6ED1052-1CC01-0BA8 Logo! 8 VendorSiemens Affected — Fixed in Multiple Patch available CNA
- 750-889 Controller KNX IP VendorWAGO Affected Multiple Fixed in — No fix listed CNA
- 750-8100 Controller PFC100 VendorWAGO Affected Multiple Fixed in — No fix listed CNA
- 750-880 Controller ETH VendorWAGO Affected Multiple Fixed in — No fix listed CNA
- 750-831 Controller BACnet/IP VendorWAGO Affected Multiple Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:abb:pm554-tp-eth_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | ABB |
| cpe:2.3:h:abb:pm554-tp-eth:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ABB |
| cpe:2.3:o:phoenixcontact:ilc_151_eth_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Phoenixcontact |
| cpe:2.3:h:phoenixcontact:ilc_151_eth:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Phoenixcontact |
| cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:* | before 1.10.0.0 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:siemens:6es7211-1ae40-0xb0_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6es7211-1ae40-0xb0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6es7314-6eh04-0ab0_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6es7314-6eh04-0ab0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:abb:pm554-tp-eth_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ABB
- cpe:2.3:h:abb:pm554-tp-eth:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ABB
- cpe:2.3:o:phoenixcontact:ilc_151_eth_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Phoenixcontact
- cpe:2.3:h:phoenixcontact:ilc_151_eth:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Phoenixcontact
- cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:* Versions before 1.10.0.0 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:siemens:6es7211-1ae40-0xb0_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:6es7211-1ae40-0xb0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6es7314-6eh04-0ab0_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:6es7314-6eh04-0ab0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:6ed1052-1cc01-0ba8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6ed1052-1cc01-0ba8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:wago:knx_ip_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | WAGO |
| cpe:2.3:h:wago:knx_ip:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:pfc100_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | WAGO |
| cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:ethernet_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | WAGO |
| cpe:2.3:h:wago:ethernet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:bacnet\/ip_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | WAGO |
| cpe:2.3:h:wago:bacnet\/ip:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:siemens:6ed1052-1cc01-0ba8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:6ed1052-1cc01-0ba8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:wago:knx_ip_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·WAGO
- cpe:2.3:h:wago:knx_ip:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:pfc100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·WAGO
- cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:ethernet_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·WAGO
- cpe:2.3:h:wago:ethernet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:bacnet\/ip_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·WAGO
- cpe:2.3:h:wago:bacnet\/ip:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
- Fix · CNA Modicon M221 (Schneider Electric) Fixed in v1.10.0.0
- Fix · CNA EcoStruxure Machine Expert – Basic (Schneider Electric) Fixed in v1.0
- Fix · CNA 6ES7211-1AE40-0XB0 Simatic S7-1211 (Siemens) Fixed in Multiple
- Fix · CNA 6ES7314-6EH04-0AB0 Simatic S7-314 (Siemens) Fixed in Multiple
- Fix · CNA 6ED1052-1CC01-0BA8 Logo! 8 (Siemens) Fixed in Multiple
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10953
- 2026-10-03 Alias added: GHSA-95m7-f345-m9h8
References
Sources
- CVE-2019-10953 · CVE Program
- CVE-2019-10953 · NVD
- FIRST EPSS
- GHSA-95m7-f345-m9h8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences