CVE-2019-10953
Estado: ModificadaAlta (7.5)—
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.40%
- Percentil entre todas las CVEs puntuadas: 88
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
ABB — Pm554-tp-eth FirmwarePhoenixcontact — ILC 151 ETH FirmwareSchneider-electric — Modicon M221 FirmwareSiemens — 6ed1052-1cc01-0ba8 FirmwareSiemens — 6es7211-1ae40-0xb0 FirmwareSiemens — 6es7314-6eh04-0ab0 FirmwareWago — Bacnet/ip FirmwareWago — Ethernet FirmwareWago — KNX IP FirmwareWago — Pfc100 Firmware
CWE
- CWE-400
- CWE-770
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-10953",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2019-10953",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-05-29T14:42:08.076750Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "ABB",
"product": "1SAP120600R0071 PM554-TP-ETH",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Phoenix Contact",
"product": "2700974 ILC 151 ETH",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Phoenix Contact",
"product": "ILC 191 ETH 2TX",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Modicon M221",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "v1.10.0.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "v1.10.0.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "EcoStruxure Machine Expert – Basic",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "v1.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "v1.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Siemens",
"product": "6ES7211-1AE40-0XB0 Simatic S7-1211",
"versions": [
{
"status": "unaffected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Siemens",
"product": "6ES7314-6EH04-0AB0 Simatic S7-314",
"versions": [
{
"status": "unaffected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Siemens",
"product": "6ED1052-1CC01-0BA8 Logo! 8",
"versions": [
{
"status": "unaffected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "WAGO",
"product": "750-889 Controller KNX IP",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "WAGO",
"product": "750-8100 Controller PFC100",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "WAGO",
"product": "750-880 Controller ETH",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "WAGO",
"product": "750-831 Controller BACnet/IP",
"versions": [
{
"status": "affected",
"version": "Multiple"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2019-04-17T15:29:00.843",
"references": [
{
"url": "http://www.securityfocus.com/bid/108413",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2019/icsa-19-106-03.json",
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-106-03",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "http://www.securityfocus.com/bid/108413",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-106-03",
"tags": [
"Mitigation",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets."
},
{
"lang": "es",
"value": "En Controladores lógicos programables de ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - , versiones múltiples. Los investigadores han encontrado que algunos controladores son susceptibles a un ataque de Denegación de Servicio (DoS) debido a una inundación de paquetes de red."
}
],
"lastModified": "2026-06-17T02:11:59.233",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:abb:pm554-tp-eth_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "847F4C95-9AB3-425F-A878-4DC195DBD668"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:abb:pm554-tp-eth:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BBE1207A-9B60-47B4-A746-DC152ED24077"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:phoenixcontact:ilc_151_eth_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB358CEE-2B29-4DAB-A100-36C841718D56"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:phoenixcontact:ilc_151_eth:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "301BA6C4-3E50-46CC-A6C9-E61948994F20"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:modicon_m221_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F757A52E-2401-4A09-B53E-73135C5289A1",
"versionEndExcluding": "1.10.0.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:modicon_m221:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BB0D83F4-B718-47AB-AFB8-B576CB138AAC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:6es7211-1ae40-0xb0_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B034C67-6905-4A7F-8ADC-DACC0B73BB8E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:6es7211-1ae40-0xb0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "70357AB0-8076-48BD-AB43-8D7AB53A0722"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:6es7314-6eh04-0ab0_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42683ED6-7FA5-41BD-AA18-F356BDD3D4DC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:6es7314-6eh04-0ab0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "577E4267-C1E8-4DBD-BADF-ABCD7234665A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:6ed1052-1cc01-0ba8_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5757EF80-9057-4179-89BC-7C1A86CE84D8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:6ed1052-1cc01-0ba8:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "60C0A7A2-8492-42F1-A3D9-013137887FA7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:wago:knx_ip_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E13BFBE3-A566-445C-BEE0-0BB8F39A6F42"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:wago:knx_ip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E24D4135-A691-479E-963A-0ED39670CEC4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:wago:pfc100_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08D508EF-AF32-4987-B3FF-D1A9EFEC94D0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8F636354-95A2-4B36-9666-1FA57F185432"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:wago:ethernet_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "111D5C0E-9346-4553-9D12-3453BA5F70B0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:wago:ethernet:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "91B48D8E-F0DD-4B6B-91D9-9B5FFF715FFD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:wago:bacnet\\/ip_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6BEBE22-0480-4513-9550-508EB52FBE03"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:wago:bacnet\\/ip:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2AB69F49-EC3E-4EA4-8DCE-53C04166505E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov"
}