CVE-2019-13940

11.02.2020, 16:15

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server
by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.

Beyond the web service, no other functions or interfaces are affected by the denial of service condition.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
siemens	CNA	5.3 MEDIUM				CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 68%

Vendor	Product	Version
siemens	s7-1200_cpu_1211c_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1212c_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1214c_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1215c_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1217c_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1212fc_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1214fc_firmware	𝑥 < 4.1
siemens	s7-1200_cpu_1215fc_firmware	𝑥 < 4.1
siemens	siplus_s7-1200_firmware	𝑥 < 4.1
siemens	siplus_cpu_1211c_firmware	𝑥 < 4.1
siemens	siplus_cpu_1212c_firmware	𝑥 < 4.1
siemens	siplus_cpu_1214c_firmware	𝑥 ≤ 4.1
siemens	siplus_cpu_1215c_firmware	𝑥 < 4.1
siemens	simatic_s7-300_cpu_319-3_pn\/dp_firmware	*
siemens	simatic_s7-300_cpu_315-2dp_firmware	*
siemens	simatic_s7-300_cpu_315-2_pn\/dp_firmware	*
siemens	simatic_s7-300_cpu_317-2_dp_firmware	*
siemens	simatic_s7-300_cpu_317-2_pn\/dp_firmware	*
siemens	simatic_s7-300_cpu_319-3_pn\/dp_firmware	*
siemens	siplus_s7-300_cpu_314_firmware	*
siemens	siplus_s7-300_cpu_315-2_dp_firmware	*
siemens	siplus_s7-300_cpu_315-2_pn\/dp_firmware	*
siemens	siplus_s7-300_cpu_317-2_pn\/dp_firmware	*
siemens	simatic_s7-400_pn\/dp_cpu_firmware	*
siemens	simatic_winac_rtx_\(f\)_2010	*

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf