{"id":"CVE-2019-13946","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-13946","generatedAt":"2026-10-28T23:39:07.699Z","title":"This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack.","description":"Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit\ninternal resource allocation when multiple legitimate diagnostic package\nrequests are sent to the DCE-RPC interface.\nThis could lead to a denial of service condition due to lack of memory\nfor devices that include a vulnerable version of the stack.\n\nThe security vulnerability could be exploited by an attacker with network\naccess to an affected device. Successful exploitation requires no system\nprivileges and no user interaction. An attacker could use the vulnerability\nto compromise the availability of the device.","published":"2020-02-11T16:15:15.000Z","lastModified":"2026-06-17T02:17:28.000Z","status":"Modified","sourceIdentifier":"productcert@siemens.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-400"],"affected":["siemens/dk standard ethernet controller","siemens/profinet driver","siemens/simatic ipc support","siemens/ek-ertec 200 firmware","siemens/ek-ertec 200p firmware","siemens/ruggedcom rm1224 firmware","siemens/scalance m-800 firmware","siemens/scalance s615 firmware","siemens/scalance w700 ieee 802.11n firmware","siemens/scalance xc-200 firmware","siemens/scalance xf-200 firmware","siemens/scalance xp-200 firmware","siemens/scalance xb-200 firmware","siemens/scalance x-200irt firmware","siemens/scalance xr-300wg firmware","siemens/scalance x-300 firmware","siemens/scalance xf-200ba firmware","siemens/scalance x-400 firmware","siemens/scalance xm-400 firmware","siemens/scalance xr524 firmware","siemens/scalance xr526 firmware","siemens/scalance xr528 firmware","siemens/scalance xr552 firmware","siemens/simatic cp 1616 firmware","siemens/simatic cp 1604 firmware","siemens/simatic cp 343-1 firmware","siemens/simatic cp 343-1 advanced firmware","siemens/simatic cp 343-1 erpc firmware","siemens/simatic cp 343-1 lean firmware","siemens/simatic cp 443-1 firmware","siemens/simatic cp 443-1 advanced firmware","siemens/simatic cp 443-1 opc ua firmware","siemens/simatic et200al im 157-1 pn firmware","siemens/simatic et200m im153-4 pn io hf firmware","siemens/simatic et200m im153-4 pn io st firmware","siemens/simatic et200mp im155-5 pn hf firmware","siemens/simatic et200mp im155-5 pn st firmware","siemens/simatic et200s firmware","siemens/simatic et200sp im155-6 pn basic firmware","siemens/simatic et200sp im155-6 pn hf firmware","siemens/simatic et200sp im155-6 pn st firmware","siemens/simatic et200ecopn firmware","siemens/simatic et200pro firmware","siemens/im 154-3 pn hf firmware","siemens/im 154-4 pn hf firmware","siemens/simatic mv440 firmware","siemens/simatic mv420 firmware","siemens/simatic pn\\/pn coupler firmware","siemens/simatic rf180c firmware","siemens/simatic rf182c firmware","siemens/simatic rf600 firmware","siemens/sinamics dcp firmware"],"epss":{"score":0.0146,"percentile":0.73432,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-780073.html","source":"productcert@siemens.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf","tags":["Vendor Advisory"],"source":"productcert@siemens.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-780073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-13946","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}