Skip to content

01 Record

CVE-2019-19300

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR

HighPUBLISHEDCNA: siemens

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

02 Description

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.72% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 76.9% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2020-04-14 00:00Z6 YR AGO

Last updated

2025-07-08 10:32Z1 YR AGO

Reserved

2019-11-26

Assigning CNA

siemens

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Weaknesses

CWE-400Uncontrolled Resource ConsumptionClass

Data version

5.1

Document digest

024594028c62078624162c34045c6cc31aa421a748fa4c954ee6f53574077b30

05 Affected products

VendorProductVersionsPlatforms

SiemensDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 2000 to < *—

SiemensDevelopment/Evaluation Kits for PROFINET IO: EK-ERTEC 200P0 to < *—

SiemensKTK ATE530S0 to < *—

SiemensSIDOOR ATD430W0 to < *—

SiemensSIDOOR ATE530S COATED0 to < *—

SiemensSIDOOR ATE531S0 to < *—

SiemensSIMATIC ET 200AL IM 157-1 PN0 to < *—

SiemensSIMATIC ET 200eco PN, AI 8xRTD/TC, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200eco PN, CM 4x IO-Link, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200eco PN, CM 8x IO-Link, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200eco PN, DI 16x24VDC, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200eco PN, DI 8x24VDC, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-LV5.1.1 to < V5.1.3—

SiemensSIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-LV5.1.1 to < V5.1.2—

SiemensSIMATIC ET 200MP IM 155-5 PN HFV4.2.0 to < *—

SiemensSIMATIC ET 200pro IM 154-8 PN/DP CPU0 to < *—

SiemensSIMATIC ET 200pro IM 154-8F PN/DP CPU0 to < *—

SiemensSIMATIC ET 200pro IM 154-8FX PN/DP CPU0 to < *—

SiemensSIMATIC ET 200S IM 151-8 PN/DP CPU0 to < *—

SiemensSIMATIC ET 200S IM 151-8F PN/DP CPU0 to < *—

SiemensSIMATIC ET 200SP IM 155-6 MF HF0 to < *—

SiemensSIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)0 to < *—

SiemensSIMATIC ET 200SP IM 155-6 PN HFV4.2.0 to < *—

SiemensSIMATIC ET 200SP IM 155-6 PN/2 HFV4.2.0 to < *—

SiemensSIMATIC ET 200SP IM 155-6 PN/3 HFV4.2.0 to < *—

SiemensSIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)0 to < V2.0—

SiemensSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)0 to < V2.0—

SiemensSIMATIC MICRO-DRIVE PDC0 to < *—

SiemensSIMATIC PN/MF Coupler0 to < *—

SiemensSIMATIC PN/PN CouplerAll versions >= V4.2—

SiemensSIMATIC S7-1200 CPU family (incl. SIPLUS variants)All versions < V4.4.0—

SiemensSIMATIC S7-1500 CPU family (incl. related ET 200 CPUs and SIPLUS variants)All versions < V2.0—

SiemensSIMATIC S7-1500 Software ControllerAll versions < V2.0—

SiemensSIMATIC S7-300 CPU 314C-2 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 315-2 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 315F-2 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 315T-3 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 317-2 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 317F-2 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 317T-3 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 317TF-3 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 319-3 PN/DP0 to < *—

SiemensSIMATIC S7-300 CPU 319F-3 PN/DP0 to < *—

SiemensSIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)0 to < *—

SiemensSIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)0 to < *—

SiemensSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)0 to < V10.2—

SiemensSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)0 to < V8.3—

SiemensSIMATIC TDC CP51M10 to < *—

SiemensSIMATIC TDC CPU5550 to < *—

SiemensSIMATIC WinAC RTX 20100 to < *—

SiemensSIMATIC WinAC RTX F 20100 to < *—

SiemensSINAMICS S/G Control Unit w. PROFINET0 to < *—

SiemensSIPLUS ET 200MP IM 155-5 PN HFV4.2.0 to < *—

SiemensSIPLUS ET 200MP IM 155-5 PN HF T1 RAILV4.2.0 to < *—

SiemensSIPLUS ET 200S IM 151-8 PN/DP CPU0 to < *—

SiemensSIPLUS ET 200S IM 151-8F PN/DP CPU0 to < *—

SiemensSIPLUS ET 200SP IM 155-6 PN HFV4.2.0 to < *—

SiemensSIPLUS ET 200SP IM 155-6 PN HF T1 RAILV4.2.0 to < *—

SiemensSIPLUS ET 200SP IM 155-6 PN HF TX RAILV4.2.0 to < *—

6 further entries not shown. The complete list is in the raw JSON document.

06 References

cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-593272.pdf
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-593272.html