High ICSA-19-106-03 1 CVE

PLC Cycle Time Influences (Update A)

Published Apr 16, 2019 · Updated Dec 12, 2019 · Revision 2

Vendor: ABB, Phoenix Contact, Schneider Electric, Siemens, and WAGO Product: 1SAP120600R0071 Product: 2700974 ILC 151 ETH Product: 6ED1052-1CC01-0BA8 Product: 6ES7211-1AE40-0XB0 Product: 750-8100 Controller Product: 750-831 Controller Product: 750-880 Controller Product: 750-889 Controller Product: ES7314-6EH04-0AB0 Product: ILC 191 ETH 2TX Product: Modicron

Summary

High network load can consume CPU power in such a way that the normal operation of the device can be affected; that is, the configured cycle time can be influenced.

Vulnerabilities 1

High 7.5

CVE-2019-10953

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researcher…

Siemens Schneider Electric ABB Phoenix Contact ICS / OT

Apr 17, 2019

Revision history

2019-12-12 #2
ICSA-19-106-03 PLC Cycle Time Influences (Update A)
2019-04-16 #1
ICSA-19-106-03 PLC Cycle Time Influences

References

ICS Advisory ICSA-19-106-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-106-03
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B