CVE-2019-10953: Abb PM554-TP-Eth Firmware

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.

Affected products

• Abb PM554-TP-Eth Firmware: affected versions not specified
• Phoenixcontact Ilc 151 Eth Firmware: affected versions not specified
• Schneider Electric Modicon m221 Firmware: before 1.10.0.0 (fixed in 1.10.0.0)
• Siemens 6ed1052-1cc01-0ba8 Firmware: affected versions not specified
• Siemens 6es7211-1ae40-0xb0 Firmware: affected versions not specified
• Siemens 6es7314-6eh04-0ab0 Firmware: affected versions not specified
• Wago Bacnet/ip Firmware: affected versions not specified
• Wago Ethernet Firmware: affected versions not specified
• Wago KNX IP Firmware: affected versions not specified
• Wago PFC100 Firmware: affected versions not specified

Published 2019-04-17. Last modified 2026-06-17.