CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2019-04-17
- Last modified
- 2026-06-04
- Weaknesses
- CWE-400, CWE-770
Affected products
- 1sap120600r0071 Pm554-tp-eth (Abb)
- Pm554-tp-eth Firmware (Abb)
- 2700974 Ilc 151 Eth (Phoenix Contact)
- Ilc 191 Eth 2tx (Phoenix Contact)
- Ilc 151 Eth Firmware (Phoenixcontact)
- Modicon M221 Firmware (Schneider-electric)
- Ecostruxure Machine Expert Basic (Schneider Electric)
- Modicon M221 (Schneider Electric)
- 6ed1052-1cc01-0ba8 Firmware (Siemens)
- 6ed1052-1cc01-0ba8 Logo 8 (Siemens)
- 6es7211-1ae40-0xb0 Firmware (Siemens)
- 6es7211-1ae40-0xb0 Simatic S7-1211 (Siemens)
- 6es7314-6eh04-0ab0 Firmware (Siemens)
- 6es7314-6eh04-0ab0 Simatic S7-314 (Siemens)
- 750-8100 Controller Pfc100 (Wago)
- 750-831 Controller Bacnetip (Wago)
- 750-880 Controller Eth (Wago)
- 750-889 Controller Knx Ip (Wago)
- Bacnet/ip Firmware (Wago)
- Ethernet Firmware (Wago)
- Knx Ip Firmware (Wago)
- Pfc100 Firmware (Wago)
References
- http://www.securityfocus.com/bid/108413
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2019/icsa-19-106-03.json
- https://ics-cert.us-cert.gov/advisories/ICSA-19-106-03
