CVE-2019-13946
No fix known EPSS 1%CVSS 7.5
Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.
Products: Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, Siemens PROFINET Driver for Controller, Siemens RUGGEDCOM RM1224 family, Siemens SCALANCE M804PB, Siemens SCALANCE M812-1 ADSL-Router, Siemens SCALANCE M816-1 ADSL-Router, Siemens SCALANCE M826-2 SHDSL-Router, Siemens SCALANCE M874-2, Siemens SCALANCE M874-3, Siemens SCALANCE M876-3, Siemens SCALANCE M876-3 (ROK), Siemens SCALANCE M876-4 (EU), Siemens SCALANCE M876-4 (NAM), Siemens SCALANCE S615 LAN-Router, Siemens SCALANCE W-700 IEEE 802.11n family, Siemens SCALANCE X200-4P IRT, Siemens SCALANCE X201-3P IRT, Siemens SCALANCE X201-3P IRT PRO, Siemens SCALANCE X202-2IRT, Siemens SCALANCE X202-2P IRT, Siemens SCALANCE X202-2P IRT PRO, Siemens SCALANCE X204-2, Siemens SCALANCE X204-2FM, Siemens SCALANCE X204-2LD, Siemens SCALANCE X204-2LD TS, Siemens SCALANCE X204-2TS, Siemens SCALANCE X204IRT, Siemens SCALANCE X204IRT PRO, Siemens SCALANCE X206-1, Siemens SCALANCE X206-1LD, Siemens SCALANCE X208, Siemens SCALANCE X208PRO, Siemens SCALANCE X212-2, Siemens SCALANCE X212-2LD, Siemens SCALANCE X216, Siemens SCALANCE X224, Siemens SCALANCE X302-7 EEC (230V, coated), Siemens SCALANCE X302-7 EEC (230V), Siemens SCALANCE X302-7 EEC (24V, coated), Siemens SCALANCE X302-7 EEC (24V), Siemens SCALANCE X302-7 EEC (2x 230V, coated), Siemens SCALANCE X302-7 EEC (2x 230V), Siemens SCALANCE X302-7 EEC (2x 24V, coated), Siemens SCALANCE X302-7 EEC (2x 24V), Siemens SCALANCE X304-2FE, Siemens SCALANCE X306-1LD FE, Siemens SCALANCE X307-2 EEC (230V, coated), Siemens SCALANCE X307-2 EEC (230V), Siemens SCALANCE X307-2 EEC (24V, coated), Siemens SCALANCE X307-2 EEC (24V), Siemens SCALANCE X307-2 EEC (2x 230V, coated), Siemens SCALANCE X307-2 EEC (2x 230V), Siemens SCALANCE X307-2 EEC (2x 24V, coated), Siemens SCALANCE X307-2 EEC (2x 24V), Siemens SCALANCE X307-3, Siemens SCALANCE X307-3LD, Siemens SCALANCE X308-2, Siemens SCALANCE X308-2LD, Siemens SCALANCE X308-2LH, Siemens SCALANCE X308-2M, Siemens SCALANCE X308-2M PoE, Siemens SCALANCE X308-2M TS, Siemens SCALANCE X310, Siemens SCALANCE X310FE, Siemens SCALANCE X320-1 FE, Siemens SCALANCE X320-1-2LD FE, Siemens SCALANCE X408-2, Siemens SCALANCE XB-200 family, Siemens SCALANCE XC-200, Siemens SCALANCE XF-200BA, Siemens SCALANCE XF201-3P IRT, Siemens SCALANCE XF202-2P IRT, Siemens SCALANCE XF204, Siemens SCALANCE XF204-2, Siemens SCALANCE XF204-2BA IRT, Siemens SCALANCE XF204IRT, Siemens SCALANCE XF206-1, Siemens SCALANCE XF208, Siemens SCALANCE XM-400 family, Siemens SCALANCE XP-200, Siemens SCALANCE XR-300WG family, Siemens SCALANCE XR-500 family, Siemens SCALANCE XR324-12M (230V, ports on front), Siemens SCALANCE XR324-12M (230V, ports on rear), Siemens SCALANCE XR324-12M (24V, ports on front), Siemens SCALANCE XR324-12M (24V, ports on rear), Siemens SCALANCE XR324-12M TS (24V), Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), Siemens SCALANCE XR324-4M EEC (24V, ports on front), Siemens SCALANCE XR324-4M EEC (24V, ports on rear), Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front), Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear), Siemens SCALANCE XR324-4M PoE (230V, ports on front), Siemens SCALANCE XR324-4M PoE (230V, ports on rear), Siemens SCALANCE XR324-4M PoE (24V, ports on front), Siemens SCALANCE XR324-4M PoE (24V, ports on rear), Siemens SCALANCE XR324-4M PoE TS (24V, ports on front), Siemens SIMATIC CP 1616 and CP 1604, Siemens SIMATIC CP 343-1, Siemens SIMATIC CP 343-1 Advanced, Siemens SIMATIC CP 343-1 ERPC, Siemens SIMATIC CP 343-1 Lean, Siemens SIMATIC CP 443-1, Siemens SIMATIC CP 443-1 Advanced, Siemens SIMATIC CP 443-1 OPC UA, Siemens SIMATIC ET 200AL IM 157-1 PN, Siemens SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants), Siemens SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants), Siemens SIMATIC ET 200MP IM 155-5 PN HF, Siemens SIMATIC ET 200MP IM 155-5 PN ST, Siemens SIMATIC ET 200pro IM 154-3 PN HF, Siemens SIMATIC ET 200pro IM 154-4 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN BA, Siemens SIMATIC ET 200SP IM 155-6 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN ST, Siemens SIMATIC ET 200SP IM 155-6 PN ST BA, Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12, Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN: IO-Link Master, Siemens SIMATIC ET200S (incl. SIPLUS variants), Siemens SIMATIC IPC Support, Package for VxWorks, Siemens SIMATIC MV420 SR-B, Siemens SIMATIC MV420 SR-B Body, Siemens SIMATIC MV420 SR-P, Siemens SIMATIC MV420 SR-P Body, Siemens SIMATIC MV440 HR, Siemens SIMATIC MV440 SR, Siemens SIMATIC MV440 UR, Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), Siemens SIMATIC RF180C, Siemens SIMATIC RF182C, Siemens SIMATIC RF600R family, Siemens SIMOTION C, Siemens SIMOTION D, Siemens SIMOTION P, Siemens SINAMICS DCP, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, Siemens SIPLUS ET 200MP IM 155-5 PN ST, Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, Siemens SIPLUS NET CP 343-1, Siemens SIPLUS NET CP 343-1 Advanced, Siemens SIPLUS NET CP 343-1 Lean, Siemens SIPLUS NET CP 443-1, Siemens SIPLUS NET CP 443-1 Advanced, Siemens SIPLUS NET SCALANCE X308-2, Siemens SOFTNET-IE PNIO