CVE-2019-10923: Siemens CP1604 Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.

Affected products

Siemens CP1604 Firmware: before 2.8 (fixed in 2.8)
Siemens CP1616 Firmware: before 2.8 (fixed in 2.8)
Siemens Dk Standard Ethernet Controller Firmware: before 4.1.1 (fixed in 4.1.1); version 4.1.1 only
Siemens Ek-Ertec 200 Firmware: before 4.5.0 (fixed in 4.5.0); version 4.5.0 only
Siemens Ek-Ertec 200p Firmware: before 4.5.0 (fixed in 4.5.0)
Siemens Scalance X-200irt Firmware: before 5.2.1 (fixed in 5.2.1)
Siemens SIMATIC Et 200ecopn Firmware: any version
Siemens SIMATIC Et 200m Firmware: any version
Siemens SIMATIC Et 200s Firmware: any version
Siemens SIMATIC Pn/pn Coupler 6es7158-3ad01-0xa0 Firmware: any version
Siemens SIMATIC s7-300 CPU 312 Ifm Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 313 Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 314 Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 314 Ifm Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 315-2 Dp Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 315 Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 316-2 Dp Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU 318-2 Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-300 CPU Firmware: before 3.3.17 (fixed in 3.3.17)
Siemens SIMATIC s7-400 Dp v7 Firmware: any version
Siemens SIMATIC s7-400 Pn v7 Firmware: any version
Siemens SIMATIC s7-400 v6 Firmware: any version
Siemens SIMATIC Winac Rtx (f) Firmware: before 2010 (fixed in 2010); version 2010 only
Siemens Simotion Firmware: any version
Siemens Sinamics Dcm Firmware: before 1.5 (fixed in 1.5); version 1.5 only
and 15 more

Published 2019-10-10. Last modified 2026-06-17.