CVE-2019-10953
High
Description
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
SeverityHigh
CVSS7.5
Exploit probability—
ProductAbb Pm554-tp-eth Firmware
PublishedApr 17, 2019
First seenApr 17, 2019
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- schneider-electric modicon_m221_firmware1.10.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| abb pm554-tp-eth_firmware | No range specified | — |
| phoenixcontact ilc_151_eth_firmware | No range specified | — |
| schneider-electric modicon_m221_firmware | v < 1.10.0.0 | 1.10.0.0 |
| siemens 6es7211-1ae40-0xb0_firmware | No range specified | — |
| siemens 6es7314-6eh04-0ab0_firmware | No range specified | — |
| siemens 6ed1052-1cc01-0ba8_firmware | No range specified | — |
| wago knx_ip_firmware | No range specified | — |
| wago pfc100_firmware | No range specified | — |
| wago ethernet_firmware | No range specified | — |
| wago bacnet\/ip_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.