Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2019-19301

Disclosure Date: April 14, 2020 •
CVE-2019-19301
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
SCALANCE X200-4P IRT All versions < V5.5.0
SCALANCE X201-3P IRT All versions < V5.5.0
SCALANCE X201-3P IRT PRO All versions < V5.5.0
SCALANCE X202-2IRT All versions < V5.5.0
SCALANCE X202-2P IRT All versions < V5.5.0
SCALANCE X202-2P IRT PRO All versions < V5.5.0
SCALANCE X204-2 All versions < V5.2.5
SCALANCE X204-2FM All versions < V5.2.5
SCALANCE X204-2LD All versions < V5.2.5
SCALANCE X204-2LD TS All versions < V5.2.5
SCALANCE X204-2TS All versions < V5.2.5
SCALANCE X204IRT All versions < V5.5.0
SCALANCE X204IRT PRO All versions < V5.5.0
SCALANCE X206-1 All versions < V5.2.5
SCALANCE X206-1LD All versions < V5.2.5
SCALANCE X208 All versions < V5.2.5
SCALANCE X208PRO All versions < V5.2.5
SCALANCE X212-2 All versions < V5.2.5
SCALANCE X212-2LD All versions < V5.2.5
SCALANCE X216 All versions < V5.2.5
SCALANCE X224 All versions < V5.2.5
SCALANCE X302-7 EEC (230V, coated) All versions < V4.1.4
SCALANCE X302-7 EEC (230V) All versions < V4.1.4
SCALANCE X302-7 EEC (24V, coated) All versions < V4.1.4
SCALANCE X302-7 EEC (24V) All versions < V4.1.4
SCALANCE X302-7 EEC (2x 230V, coated) All versions < V4.1.4
SCALANCE X302-7 EEC (2x 230V) All versions < V4.1.4
SCALANCE X302-7 EEC (2x 24V, coated) All versions < V4.1.4
SCALANCE X302-7 EEC (2x 24V) All versions < V4.1.4
SCALANCE X304-2FE All versions < V4.1.4
SCALANCE X306-1LD FE All versions < V4.1.4
SCALANCE X307-2 EEC (230V, coated) All versions < V4.1.4
SCALANCE X307-2 EEC (230V) All versions < V4.1.4
SCALANCE X307-2 EEC (24V, coated) All versions < V4.1.4
SCALANCE X307-2 EEC (24V) All versions < V4.1.4
SCALANCE X307-2 EEC (2x 230V, coated) All versions < V4.1.4
SCALANCE X307-2 EEC (2x 230V) All versions < V4.1.4
SCALANCE X307-2 EEC (2x 24V, coated) All versions < V4.1.4
SCALANCE X307-2 EEC (2x 24V) All versions < V4.1.4
SCALANCE X307-3 All versions < V4.1.4
SCALANCE X307-3 All versions < V4.1.4
SCALANCE X307-3LD All versions < V4.1.4
SCALANCE X307-3LD All versions < V4.1.4
SCALANCE X308-2 All versions < V4.1.4
SCALANCE X308-2 All versions < V4.1.4
SCALANCE X308-2LD All versions < V4.1.4
SCALANCE X308-2LD All versions < V4.1.4
SCALANCE X308-2LH All versions < V4.1.4
SCALANCE X308-2LH All versions < V4.1.4
SCALANCE X308-2LH+ All versions < V4.1.4
SCALANCE X308-2LH+ All versions < V4.1.4
SCALANCE X308-2M All versions < V4.1.4
SCALANCE X308-2M All versions < V4.1.4
SCALANCE X308-2M PoE All versions < V4.1.4
SCALANCE X308-2M PoE All versions < V4.1.4
SCALANCE X308-2M TS All versions < V4.1.4
SCALANCE X308-2M TS All versions < V4.1.4
SCALANCE X310 All versions < V4.1.4
SCALANCE X310 All versions < V4.1.4
SCALANCE X310FE All versions < V4.1.4
SCALANCE X310FE All versions < V4.1.4
SCALANCE X320-1 FE All versions < V4.1.4
SCALANCE X320-1-2LD FE All versions < V4.1.4
SCALANCE X408-2 All versions < V4.1.4
SCALANCE XF201-3P IRT All versions < V5.5.0
SCALANCE XF202-2P IRT All versions < V5.5.0
SCALANCE XF204 All versions < V5.2.5
SCALANCE XF204-2 All versions < V5.2.5
SCALANCE XF204-2BA IRT All versions < V5.5.0
SCALANCE XF204IRT All versions < V5.5.0
SCALANCE XF206-1 All versions < V5.2.5
SCALANCE XF208 All versions < V5.2.5
SCALANCE XR324-12M (230V, ports on front) All versions < V4.1.4
SCALANCE XR324-12M (230V, ports on front) All versions < V4.1.4
SCALANCE XR324-12M (230V, ports on rear) All versions < V4.1.4
SCALANCE XR324-12M (230V, ports on rear) All versions < V4.1.4
SCALANCE XR324-12M (24V, ports on front) All versions < V4.1.4
SCALANCE XR324-12M (24V, ports on front) All versions < V4.1.4
SCALANCE XR324-12M (24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-12M (24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-12M TS (24V) All versions < V4.1.4
SCALANCE XR324-12M TS (24V) All versions < V4.1.4
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (24V, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (24V, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 24V, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 24V, ports on front) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M EEC (2x 24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M PoE (230V, ports on front) All versions < V4.1.4
SCALANCE XR324-4M PoE (230V, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M PoE (24V, ports on front) All versions < V4.1.4
SCALANCE XR324-4M PoE (24V, ports on rear) All versions < V4.1.4
SCALANCE XR324-4M PoE TS (24V, ports on front) All versions < V4.1.4
SIMATIC CP 343-1 Advanced All versions
SIMATIC CP 442-1 RNA All versions < V1.5.18
SIMATIC CP 443-1 All versions < V3.3
SIMATIC CP 443-1 All versions < V3.3
SIMATIC CP 443-1 Advanced All versions < V3.3
SIMATIC CP 443-1 RNA All versions < V1.5.18
SIMATIC RF180C All versions
SIMATIC RF182C All versions
SIPLUS NET CP 343-1 Advanced All versions
SIPLUS NET CP 443-1 All versions < V3.3
SIPLUS NET CP 443-1 Advanced All versions < V3.3
SIPLUS NET SCALANCE X308-2 All versions < V4.1.4
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis