CVE-2019-19281
Estado: ModificadaAlta (7.5)—
A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device.
Leer descripción completaMostrar menos
The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.68%
- Percentil entre todas las CVEs puntuadas: 76
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (14)
Siemens — Simatic ET 200sp Open Controller CPU 1515sp PC2 FirmwareSiemens — Simatic S7-1500 CPU 1507s F FirmwareSiemens — Simatic S7-1500 CPU 1507s FirmwareSiemens — Simatic S7-1500 CPU 1508s F FirmwareSiemens — Simatic S7-1500 CPU 1508s FirmwareSiemens — Simatic S7-1500 CPU 1511-1 PN FirmwareSiemens — Simatic S7-1500 CPU 1513-1 PN FirmwareSiemens — Simatic S7-1500 CPU 1515-2 PN FirmwareSiemens — Simatic S7-1500 CPU 1516-3 DP FirmwareSiemens — Simatic S7-1500 CPU 1516-3 PN FirmwareSiemens — Simatic S7-1500 CPU 1517-3 DP FirmwareSiemens — Simatic S7-1500 CPU 1517-3 PN FirmwareSiemens — Simatic S7-1500 CPU 1518-4 DP FirmwareSiemens — Simatic S7-1500 CPU 1518-4 PN Firmware
CWE
- CWE-400
- CWE-400
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-19281",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens AG",
"product": "SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions >= V2.5 and < V20.8"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions >= V2.5 and < V2.8"
}
]
},
{
"vendor": "Siemens AG",
"product": "SIMATIC S7-1500 Software Controller",
"versions": [
{
"status": "affected",
"version": "All versions >= V2.5 and < V20.8"
}
]
}
]
}
],
"published": "2020-03-10T20:15:18.897",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdf",
"tags": [
"Vendor Advisory"
],
"source": "productcert@siemens.com"
},
{
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-042-11",
"source": "productcert@siemens.com"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-042-11",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incluyendo las variantes de SIPLUS) (todas las versiones posteriores a V2.5 incluyéndola y anteriores a V20.8), SIMATIC S7-1500 CPU family (incluyendo las variantes de ET200 CPUs y SIPLUS relacionadas) (todas las versiones posteriores a V2.5 incluyéndola y anteriores a V2.8), SIMATIC S7-1500 Software Controller (todas las versiones posteriores a V2.5 incluyéndola y anteriores a V20.8). Los dispositivos afectados contienen una vulnerabilidad que permite a un atacante no autenticado activar una condición de denegación de servicio. La vulnerabilidad puede ser desencadenada si paquetes UDP especialmente diseñados son enviados hacia el dispositivo. La vulnerabilidad de seguridad podría ser explotada por parte de un atacante con acceso de red a los sistemas afectados. Una explotación con éxito no requiere privilegios system ni una interacción del usuario. Un atacante podría usar la vulnerabilidad para comprometer la disponibilidad del dispositivo."
}
],
"lastModified": "2026-06-17T02:26:25.493",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11015DA0-2BA7-4F1A-9675-A2479760E6E7",
"versionEndExcluding": "20.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "30E3491F-8F4A-4C7D-960D-073AA41DB4D6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2514FAB-314D-4524-879A-BB338D125ADC",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1_pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F62F4050-F6C9-4C8F-8E09-F0AEEDB6B1FC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9030F7EC-1967-4EB6-9A81-8CC8A7E6D8F2",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1_pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D6663D66-5127-4F5D-B39D-50D3F88F4435"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36AD01AF-950E-4872-B035-E23FDF3F2FA1",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2_pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ABE9C79B-52A3-45F4-9DA5-6D61A6BF7753"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D087916-0A96-400A-AAE0-0F002C9199BC",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "439E1B3E-7174-4BAC-A11A-F4F37ABB7291"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_dp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DF77D52-CC95-43C1-A512-F3B8E245663B",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_dp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5FD1F20-E507-4422-814D-19614CDB49B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93D466BA-5B14-4937-A2B2-9AC0152FF7AA",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C44E126-E4D9-44D8-B8B9-10F060D63A2B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_dp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81B3028C-259D-4AE5-A1E4-C4EC15144DD1",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_dp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ABE53C35-490A-498B-8CAB-B874C0E17AF1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2127DA06-9654-41D9-A77E-C8DBE69C1B7D",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4245AED2-3F58-40D0-BF8A-8E930E1730B7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_dp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E68216BA-EA96-45EA-AF05-77F3EDE33B2C",
"versionEndExcluding": "2.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_dp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6772D5F3-35EE-4C94-B6D5-31500F440CCF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1507s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77CE921E-E5AA-4921-B534-A52BCDA4DAEE",
"versionEndExcluding": "20.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1507s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "39C1392C-38E2-4AF9-AF17-91B93BC6B9B8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1508s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30E73D3B-0813-4769-AE38-B8FB474882D5",
"versionEndExcluding": "20.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1508s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "46CBD063-6CF0-45E6-A9D1-C7F8709806AA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1507s_f_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77BF38CD-E49D-4912-8DF7-190C36F1E806",
"versionEndExcluding": "20.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1507s_f:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F1ED29DF-8AC0-4BB6-ACE2-EBC0A2B87F96"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1508s_f_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21D4BADD-1B65-4324-9B20-4DE77D5500FC",
"versionEndExcluding": "20.8",
"versionStartIncluding": "2.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1508s_f:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2079B95-E885-4490-BCEA-62BBEAF9CB51"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productcert@siemens.com"
}