CVE-2019-13946: Siemens Dk Standard Ethernet Controller

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Affected products

  • Siemens Dk Standard Ethernet Controller: any version
  • Siemens Ek-Ertec 200 Firmware: before 4.5 (fixed in 4.5)
  • Siemens Ek-Ertec 200p Firmware: before 4.6 (fixed in 4.6)
  • Siemens Im 154-3 Pn Hf Firmware: any version
  • Siemens Im 154-4 Pn Hf Firmware: any version
  • Siemens Profinet Driver: before 2.1 (fixed in 2.1)
  • Siemens Ruggedcom RM1224 Firmware: before 4.3 (fixed in 4.3)
  • Siemens Scalance M-800 Firmware: before 4.3 (fixed in 4.3)
  • Siemens Scalance s615 Firmware: before 4.3 (fixed in 4.3)
  • Siemens Scalance w700 Ieee 802.11n Firmware: up to and including 6.0.1
  • Siemens Scalance X-200irt Firmware: before 5.3 (fixed in 5.3)
  • Siemens Scalance X-300 Firmware: any version
  • Siemens Scalance X-400 Firmware: before 6.0 (fixed in 6.0)
  • Siemens Scalance Xb-200 Firmware: any version; before 3.0 (fixed in 3.0)
  • Siemens Scalance Xc-200 Firmware: any version; before 3.0 (fixed in 3.0)
  • Siemens Scalance Xf-200 Firmware: any version
  • Siemens Scalance Xf-200ba Firmware: before 3.0 (fixed in 3.0)
  • Siemens Scalance Xm-400 Firmware: before 6.0 (fixed in 6.0)
  • Siemens Scalance XP-200 Firmware: any version; before 3.0 (fixed in 3.0)
  • Siemens Scalance XR-300wg Firmware: before 3.0 (fixed in 3.0)
  • Siemens Scalance XR524 Firmware: before 6.0 (fixed in 6.0)
  • Siemens Scalance XR526 Firmware: before 6.0 (fixed in 6.0)
  • Siemens Scalance XR528 Firmware: before 6.0 (fixed in 6.0)
  • Siemens Scalance XR552 Firmware: before 6.0 (fixed in 6.0)
  • Siemens SIMATIC CP 1604 Firmware: before 2.8 (fixed in 2.8)
  • and 27 more

Published 2020-02-11. Last modified 2026-06-17.