CVE-2019-19279: Siemens Siprotec 4

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.

Affected products

• Siemens Siprotec 4: any version
• Siemens Siprotec Compact: any version

Published 2020-03-10. Last modified 2026-06-17.