Skip to content
OpenAdvisories
High · 7.5 CVE-2019-19301 EUVD-2019-8925GHSA-j5jq-7977-4wm2

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X…

Published Apr 14, 2020 · Updated Aug 5, 2024 · Assigned by siemens

Vendor: Siemens Product: SCALANCE X200-4P IRT Product: SCALANCE X201-3P IRT Product: SCALANCE X201-3P IRT PRO Product: SCALANCE X202-2IRT Product: SCALANCE X202-2P IRT Product: SCALANCE X202-2P IRT PRO Product: SCALANCE X204-2 Product: SCALANCE X204-2FM Product: SCALANCE X204-2LD Product: SCALANCE X204-2LD TS Product: SCALANCE X204-2TS Product: SCALANCE X204IRT Product: SCALANCE X204IRT PRO Product: SCALANCE X206-1 Product: SCALANCE X206-1LD Product: SCALANCE X208 Product: SCALANCE X208PRO Product: SCALANCE X212-2 Product: SCALANCE X212-2LD Product: SCALANCE X216 Product: SCALANCE X224 Product: SCALANCE X302-7 EEC (230V, coated) Product: SCALANCE X302-7 EEC (230V) Product: SCALANCE X302-7 EEC (24V, coated) Product: SCALANCE X302-7 EEC (24V) Product: SCALANCE X302-7 EEC (2x 230V, coated) Product: SCALANCE X302-7 EEC (2x 230V) Product: SCALANCE X302-7 EEC (2x 24V, coated) Product: SCALANCE X302-7 EEC (2x 24V) Product: SCALANCE X304-2FE Product: SCALANCE X306-1LD FE Product: SCALANCE X307-2 EEC (230V, coated) Product: SCALANCE X307-2 EEC (230V) Product: SCALANCE X307-2 EEC (24V, coated) Product: SCALANCE X307-2 EEC (24V) Product: SCALANCE X307-2 EEC (2x 230V, coated) Product: SCALANCE X307-2 EEC (2x 230V) Product: SCALANCE X307-2 EEC (2x 24V, coated) Product: SCALANCE X307-2 EEC (2x 24V) Product: SCALANCE X307-3 Product: SCALANCE X307-3LD Product: SCALANCE X308-2 Product: SCALANCE X308-2LD Product: SCALANCE X308-2LH Product: SCALANCE X308-2M Product: SCALANCE X308-2M PoE Product: SCALANCE X308-2M TS Product: SCALANCE X310 Product: SCALANCE X310FE Category: ICS / OT

Description

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Affected products

VendorProductAffectedFixed
Siemens SCALANCE X200-4P IRT All versions < V5.5.0 —
Siemens SCALANCE X201-3P IRT All versions < V5.5.0 —
Siemens SCALANCE X201-3P IRT PRO All versions < V5.5.0 —
Siemens SCALANCE X202-2IRT All versions < V5.5.0 —
Siemens SCALANCE X202-2P IRT All versions < V5.5.0 —
Siemens SCALANCE X202-2P IRT PRO All versions < V5.5.0 —
Siemens SCALANCE X204-2 All versions < V5.2.5 —
Siemens SCALANCE X204-2FM All versions < V5.2.5 —
Siemens SCALANCE X204-2LD All versions < V5.2.5 —
Siemens SCALANCE X204-2LD TS All versions < V5.2.5 —
Siemens SCALANCE X204-2TS All versions < V5.2.5 —
Siemens SCALANCE X204IRT All versions < V5.5.0 —
Siemens SCALANCE X204IRT PRO All versions < V5.5.0 —
Siemens SCALANCE X206-1 All versions < V5.2.5 —
Siemens SCALANCE X206-1LD All versions < V5.2.5 —
Siemens SCALANCE X208 All versions < V5.2.5 —
Siemens SCALANCE X208PRO All versions < V5.2.5 —
Siemens SCALANCE X212-2 All versions < V5.2.5 —
Siemens SCALANCE X212-2LD All versions < V5.2.5 —
Siemens SCALANCE X216 All versions < V5.2.5 —
Siemens SCALANCE X224 All versions < V5.2.5 —
Siemens SCALANCE X302-7 EEC (230V, coated) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (230V) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (24V, coated) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (24V) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (2x 230V, coated) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (2x 230V) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (2x 24V, coated) All versions < V4.1.4 —
Siemens SCALANCE X302-7 EEC (2x 24V) All versions < V4.1.4 —
Siemens SCALANCE X304-2FE All versions < V4.1.4 —
Siemens SCALANCE X306-1LD FE All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (230V, coated) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (230V) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (24V, coated) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (24V) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (2x 230V, coated) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (2x 230V) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (2x 24V, coated) All versions < V4.1.4 —
Siemens SCALANCE X307-2 EEC (2x 24V) All versions < V4.1.4 —
Siemens SCALANCE X307-3 All versions < V4.1.4 —
Siemens SCALANCE X307-3LD All versions < V4.1.4 —
Siemens SCALANCE X308-2 All versions < V4.1.4 —
Siemens SCALANCE X308-2LD All versions < V4.1.4 —
Siemens SCALANCE X308-2LH All versions < V4.1.4 —
Siemens SCALANCE X308-2LH+ All versions < V4.1.4 —
Siemens SCALANCE X308-2M All versions < V4.1.4 —
Siemens SCALANCE X308-2M PoE All versions < V4.1.4 —
Siemens SCALANCE X308-2M TS All versions < V4.1.4 —
Siemens SCALANCE X310 All versions < V4.1.4 —
Siemens SCALANCE X310FE All versions < V4.1.4 —
Siemens SCALANCE X320-1 FE All versions < V4.1.4 —
Siemens SCALANCE X320-1-2LD FE All versions < V4.1.4 —
Siemens SCALANCE X408-2 All versions < V4.1.4 —
Siemens SCALANCE XF201-3P IRT All versions < V5.5.0 —
Siemens SCALANCE XF202-2P IRT All versions < V5.5.0 —
Siemens SCALANCE XF204 All versions < V5.2.5 —
Siemens SCALANCE XF204-2 All versions < V5.2.5 —
Siemens SCALANCE XF204-2BA IRT All versions < V5.5.0 —
Siemens SCALANCE XF204IRT All versions < V5.5.0 —
Siemens SCALANCE XF206-1 All versions < V5.2.5 —
Siemens SCALANCE XF208 All versions < V5.2.5 —
Siemens SCALANCE XR324-12M (230V, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-12M (230V, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-12M (24V, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-12M (24V, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-12M TS (24V) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (24V, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (24V, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M PoE (230V, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M PoE (230V, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M PoE (24V, ports on front) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M PoE (24V, ports on rear) All versions < V4.1.4 —
Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) All versions < V4.1.4 —
Siemens SIMATIC CP 343-1 Advanced All versions —
Siemens SIMATIC CP 442-1 RNA All versions < V1.5.18 —
Siemens SIMATIC CP 443-1 All versions < V3.3 —
Siemens SIMATIC CP 443-1 Advanced All versions < V3.3 —
Siemens SIMATIC CP 443-1 RNA All versions < V1.5.18 —
Siemens SIMATIC RF180C All versions —
Siemens SIMATIC RF182C All versions —
Siemens SIPLUS NET CP 343-1 Advanced All versions —
Siemens SIPLUS NET CP 443-1 All versions < V3.3 —
Siemens SIPLUS NET CP 443-1 Advanced All versions < V3.3 —
Siemens SIPLUS NET SCALANCE X308-2 All versions < V4.1.4 —

Advisories 2

References