Description (CNA)
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ABB / 1SAP120600R0071 PM554-TP-ETH | affected Multiple |
| Phoenix Contact / 2700974 ILC 151 ETH | affected Multiple |
| Phoenix Contact / ILC 191 ETH 2TX | affected Multiple |
| Schneider Electric / Modicon M221 | affected 0 before v1.10.0.0; unaffected v1.10.0.0 |
| Schneider Electric / EcoStruxure Machine Expert – Basic | affected 0 before v1.0; unaffected v1.0 |
| Siemens / 6ES7211-1AE40-0XB0 Simatic S7-1211 | unaffected Multiple |
| Siemens / 6ES7314-6EH04-0AB0 Simatic S7-314 | unaffected Multiple |
| Siemens / 6ED1052-1CC01-0BA8 Logo! 8 | unaffected Multiple |
| WAGO / 750-889 Controller KNX IP | affected Multiple |
| WAGO / 750-8100 Controller PFC100 | affected Multiple |
| WAGO / 750-880 Controller ETH | affected Multiple |
| WAGO / 750-831 Controller BACnet/IP | affected Multiple |
CWE
CWE-400
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-106-03
- http://www.securityfocus.com/bid/108413
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2019/icsa-19-106-03.json
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.