CVE-2019-10936: Siemens Dk Standard Ethernet Controller Firmware

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Affected products

• Siemens Dk Standard Ethernet Controller Firmware: any version
• Siemens Ek-Ertec 200 Firmware: any version
• Siemens Ek-Ertec 200p Firmware: before 4.6 (fixed in 4.6); version 4.6 only
• Siemens SIMATIC Cfu Pa Firmware: before 1.2.0 (fixed in 1.2.0)
• Siemens SIMATIC Et 200al Firmware: any version
• Siemens SIMATIC Et 200ecopn Firmware: any version
• Siemens SIMATIC Et 200m Firmware: any version
• Siemens SIMATIC Et 200mp Im 155-5 Pn BA Firmware: before 4.3.0 (fixed in 4.3.0)
• Siemens SIMATIC Et 200mp Im 155-5 Pn Hf Firmware: before 4.4.0 (fixed in 4.4.0)
• Siemens SIMATIC Et 200mp Im 155-5 Pn St Firmware: any version
• Siemens SIMATIC Et 200pro Firmware: any version
• Siemens SIMATIC Et 200s Firmware: any version
• Siemens SIMATIC Et 200sp Im 155-6 pn/2 Hf Firmware: before 4.2.2 (fixed in 4.2.2)
• Siemens SIMATIC Et 200sp Im 155-6 pn/3 Hf Firmware: before 4.2.1 (fixed in 4.2.1)
• Siemens SIMATIC Et 200sp Im 155-6 Pn BA Firmware: any version
• Siemens SIMATIC Et 200sp Im 155-6 Pn Ha Firmware: any version
• Siemens SIMATIC Et 200sp Im 155-6 Pn Hf Firmware: before 4.2.2 (fixed in 4.2.2)
• Siemens SIMATIC Et 200sp Im 155-6 Pn Hs Firmware: any version
• Siemens SIMATIC Et 200sp Im 155-6 Pn St Firmware: any version
• Siemens SIMATIC HMI Comfort Outdoor Panels 15" Firmware: any version
• Siemens SIMATIC HMI Comfort Outdoor Panels 7" Firmware: any version
• Siemens SIMATIC HMI Comfort Panels 22" Firmware: any version
• Siemens SIMATIC HMI Comfort Panels 4" Firmware: any version
• Siemens SIMATIC HMI Ktp Mobile Panels Firmware: any version
• Siemens SIMATIC Pn/pn Coupler Firmware: before 4.2.1 (fixed in 4.2.1)
• and 41 more

Published 2019-10-10. Last modified 2026-06-17.