CVE-2019-13946 
Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit
internal resource allocation when multiple legitimate diagnostic package
requests are sent to the DCE-RPC interface.
This could lead to a denial of service condition due to lack of memory
for devices that include a vulnerable version of the stack.

The security vulnerability could be exploited by an attacker with network
access to an affected device. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise the availability of the device.
Problem types: cwe_id: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
Affected products: vendor: Siemens
product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
default_status: unknown
vendor: Siemens
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
default_status: unknown
vendor: Siemens
product: Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
default_status: unknown
vendor: Siemens
product: PROFINET Driver for Controller
default_status: unknown
vendor: Siemens
product: RUGGEDCOM RM1224 family
default_status: unknown
vendor: Siemens
product: SCALANCE M804PB
default_status: unknown
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router
default_status: unknown
vendor: Siemens
product: SCALANCE M812-1 ADSL-Router
default_status: unknown
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router
default_status: unknown
vendor: Siemens
product: SCALANCE M816-1 ADSL-Router
default_status: unknown
vendor: Siemens
product: SCALANCE M826-2 SHDSL-Router
default_status: unknown
vendor: Siemens
product: SCALANCE M874-2
default_status: unknown
vendor: Siemens
product: SCALANCE M874-3
default_status: unknown
vendor: Siemens
product: SCALANCE M876-3
default_status: unknown
vendor: Siemens
product: SCALANCE M876-3 (ROK)
default_status: unknown
vendor: Siemens
product: SCALANCE M876-4 (EU)
default_status: unknown
vendor: Siemens
product: SCALANCE M876-4 (NAM)
default_status: unknown
vendor: Siemens
product: SCALANCE S615 LAN-Router
default_status: unknown
vendor: Siemens
product: SCALANCE W-700 IEEE 802.11n family
default_status: unknown
vendor: Siemens
product: SCALANCE X200-4P IRT
default_status: unknown
vendor: Siemens
product: SCALANCE X201-3P IRT
default_status: unknown
vendor: Siemens
product: SCALANCE X201-3P IRT PRO
default_status: unknown
vendor: Siemens
product: SCALANCE X202-2IRT
default_status: unknown
vendor: Siemens
product: SCALANCE X202-2P IRT
default_status: unknown
vendor: Siemens
product: SCALANCE X202-2P IRT PRO
default_status: unknown
vendor: Siemens
product: SCALANCE X204-2
default_status: unknown
vendor: Siemens
product: SCALANCE X204-2FM
default_status: unknown
vendor: Siemens
product: SCALANCE X204-2LD
default_status: unknown
vendor: Siemens
product: SCALANCE X204-2LD TS
default_status: unknown
vendor: Siemens
product: SCALANCE X204-2TS
default_status: unknown
vendor: Siemens
product: SCALANCE X204IRT
default_status: unknown
vendor: Siemens
product: SCALANCE X204IRT PRO
default_status: unknown
vendor: Siemens
product: SCALANCE X206-1
default_status: unknown
vendor: Siemens
product: SCALANCE X206-1LD
default_status: unknown
vendor: Siemens
product: SCALANCE X208
default_status: unknown
vendor: Siemens
product: SCALANCE X208PRO
default_status: unknown
vendor: Siemens
product: SCALANCE X212-2
default_status: unknown
vendor: Siemens
product: SCALANCE X212-2LD
default_status: unknown
vendor: Siemens
product: SCALANCE X216
default_status: unknown
vendor: Siemens
product: SCALANCE X224
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (230V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (230V)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (24V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (24V)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (2x 230V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (2x 230V)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (2x 24V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X302-7 EEC (2x 24V)
default_status: unknown
vendor: Siemens
product: SCALANCE X304-2FE
default_status: unknown
vendor: Siemens
product: SCALANCE X306-1LD FE
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (230V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (230V)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (24V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (24V)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (2x 230V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (2x 230V)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (2x 24V, coated)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-2 EEC (2x 24V)
default_status: unknown
vendor: Siemens
product: SCALANCE X307-3
default_status: unknown
vendor: Siemens
product: SCALANCE X307-3
default_status: unknown
vendor: Siemens
product: SCALANCE X307-3LD
default_status: unknown
vendor: Siemens
product: SCALANCE X307-3LD
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2LD
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2LD
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2LH
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2LH
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2LH+
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2LH+
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2M
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2M
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2M PoE
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2M PoE
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2M TS
default_status: unknown
vendor: Siemens
product: SCALANCE X308-2M TS
default_status: unknown
vendor: Siemens
product: SCALANCE X310
default_status: unknown
vendor: Siemens
product: SCALANCE X310
default_status: unknown
vendor: Siemens
product: SCALANCE X310FE
default_status: unknown
vendor: Siemens
product: SCALANCE X310FE
default_status: unknown
vendor: Siemens
product: SCALANCE X320-1 FE
default_status: unknown
vendor: Siemens
product: SCALANCE X320-1-2LD FE
default_status: unknown
vendor: Siemens
product: SCALANCE X408-2
default_status: unknown
vendor: Siemens
product: SCALANCE XB-200 family
default_status: unknown
vendor: Siemens
product: SCALANCE XC-200
default_status: unknown
vendor: Siemens
product: SCALANCE XF-200BA
default_status: unknown
vendor: Siemens
product: SCALANCE XF201-3P IRT
default_status: unknown
vendor: Siemens
product: SCALANCE XF202-2P IRT
default_status: unknown
vendor: Siemens
product: SCALANCE XF204
default_status: unknown
vendor: Siemens
product: SCALANCE XF204-2
default_status: unknown
vendor: Siemens
product: SCALANCE XF204-2BA IRT
default_status: unknown
vendor: Siemens
product: SCALANCE XF204IRT
default_status: unknown
vendor: Siemens
product: SCALANCE XF206-1
default_status: unknown
vendor: Siemens
product: SCALANCE XF208
default_status: unknown
vendor: Siemens
product: SCALANCE XM-400 family
default_status: unknown
vendor: Siemens
product: SCALANCE XP-200
default_status: unknown
vendor: Siemens
product: SCALANCE XR-300WG family
default_status: unknown
vendor: Siemens
product: SCALANCE XR-500 family
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (230V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (230V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (230V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (230V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M (24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M TS (24V)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-12M TS (24V)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M EEC (2x 24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M PoE (230V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M PoE (230V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M PoE (24V, ports on front)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M PoE (24V, ports on rear)
default_status: unknown
vendor: Siemens
product: SCALANCE XR324-4M PoE TS (24V, ports on front)
default_status: unknown
vendor: Siemens
product: SIMATIC CP 1616 and CP 1604
default_status: unknown
vendor: Siemens
product: SIMATIC CP 343-1
default_status: unknown
vendor: Siemens
product: SIMATIC CP 343-1 Advanced
default_status: unknown
vendor: Siemens
product: SIMATIC CP 343-1 ERPC
default_status: unknown
vendor: Siemens
product: SIMATIC CP 343-1 Lean
default_status: unknown
vendor: Siemens
product: SIMATIC CP 443-1
default_status: unknown
vendor: Siemens
product: SIMATIC CP 443-1
default_status: unknown
vendor: Siemens
product: SIMATIC CP 443-1 Advanced
default_status: unknown
vendor: Siemens
product: SIMATIC CP 443-1 OPC UA
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200AL IM 157-1 PN
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants)
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants)
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200MP IM 155-5 PN HF
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200MP IM 155-5 PN ST
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200pro IM 154-3 PN HF
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200pro IM 154-4 PN HF
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP IM 155-6 PN BA
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP IM 155-6 PN HF
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP IM 155-6 PN ST
default_status: unknown
vendor: Siemens
product: SIMATIC ET 200SP IM 155-6 PN ST BA
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 4AO U/I 4xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
default_status: unknown
vendor: Siemens
product: SIMATIC ET200ecoPN: IO-Link Master
default_status: unknown
vendor: Siemens
product: SIMATIC ET200S (incl. SIPLUS variants)
default_status: unknown
vendor: Siemens
product: SIMATIC IPC Support, Package for VxWorks
default_status: unknown
vendor: Siemens
product: SIMATIC MV420 SR-B
default_status: unknown
vendor: Siemens
product: SIMATIC MV420 SR-B Body
default_status: unknown
vendor: Siemens
product: SIMATIC MV420 SR-P
default_status: unknown
vendor: Siemens
product: SIMATIC MV420 SR-P Body
default_status: unknown
vendor: Siemens
product: SIMATIC MV440 HR
default_status: unknown
vendor: Siemens
product: SIMATIC MV440 SR
default_status: unknown
vendor: Siemens
product: SIMATIC MV440 UR
default_status: unknown
vendor: Siemens
product: SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
default_status: unknown
vendor: Siemens
product: SIMATIC RF180C
default_status: unknown
vendor: Siemens
product: SIMATIC RF182C
default_status: unknown
vendor: Siemens
product: SIMATIC RF600R family
default_status: unknown
vendor: Siemens
product: SIMOTION C
default_status: unknown
vendor: Siemens
product: SIMOTION D
default_status: unknown
vendor: Siemens
product: SIMOTION P
default_status: unknown
vendor: Siemens
product: SINAMICS DCP
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200MP IM 155-5 PN HF
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200MP IM 155-5 PN HF
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200MP IM 155-5 PN ST
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN HF
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN HF
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN ST
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN ST BA
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
default_status: unknown
vendor: Siemens
product: SIPLUS NET CP 343-1
default_status: unknown
vendor: Siemens
product: SIPLUS NET CP 343-1 Advanced
default_status: unknown
vendor: Siemens
product: SIPLUS NET CP 343-1 Lean
default_status: unknown
vendor: Siemens
product: SIPLUS NET CP 443-1
default_status: unknown
vendor: Siemens
product: SIPLUS NET CP 443-1 Advanced
default_status: unknown
vendor: Siemens
product: SIPLUS NET SCALANCE X308-2
default_status: unknown
vendor: Siemens
product: SOFTNET-IE PNIO
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 7.5
baseSeverity: HIGH
Published: 2020-02-11T15:36:10.000Z