VulnerabilityModified

CVE-2019-13946

This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack.

HIGH 7.5EPSS 1.46%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 1.46% probability · 72th percentile
CISA KEV: Not listed
Weakness: CWE-400
Affected: siemens/dk standard ethernet controller · siemens/profinet driver · siemens/simatic ipc support · siemens/ek-ertec 200 firmware · siemens/ek-ertec 200p firmware · siemens/ruggedcom rm1224 firmware · siemens/scalance m-800 firmware · siemens/scalance s615 firmware · siemens/scalance w700 ieee 802.11n firmware · siemens/scalance xc-200 firmware · siemens/scalance xf-200 firmware · siemens/scalance xp-200 firmware · siemens/scalance xb-200 firmware · siemens/scalance x-200irt firmware · siemens/scalance xr-300wg firmware · siemens/scalance x-300 firmware · siemens/scalance xf-200ba firmware · siemens/scalance x-400 firmware · siemens/scalance xm-400 firmware · siemens/scalance xr524 firmware · +32 more
Source: productcert@siemens.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.