CVE-2019-19279

CVE-2019-19279

Vendor Siemens Ag
Product SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules
Weakness CWE-20 · Input validation
Published March 10, 2020
Last update August 5, 2024

CVSS base score

What the vulnerability does

01Description

A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.

Key dates

02Disclosure timeline

March 10, 2020 CVE published
August 5, 2024 Record updated