CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
- Record
CVE-2019-10953- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400, CWE-770
- Updated
- 2026-11-02
CVE List
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
- Record
CVE-2019-10953- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2019-2667
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
- Record
EUVD-2019-2667- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-95m7-f345-m9h8
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.
- Record
GHSA-95m7-f345-m9h8- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-770
- Updated
- 2026-11-02
Affected products
- abb 1sap120600r0071 pm554-tp-eth
- abb pm554-tp-eth firmware
- abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth
- abb, phoenix contact, schneider electric, siemens, and wago ilc 191 eth 2tx
- phoenix contact 2700974 ilc 151 eth
- phoenix contact ilc 191 eth 2tx
- phoenixcontact ilc 151 eth firmware
- schneider electric ecostruxure machine expert – basic
- schneider electric modicon m221
- schneider electric software, llc modicon m221
- schneider-electric modicon m221 firmware
- siemens 6ed1052-1cc01-0ba8 logo! 8
Show 13 moreShow less
- siemens 6ed1052-1cc01-0ba8 firmware
- siemens 6es7211-1ae40-0xb0 simatic s7-1211
- siemens 6es7211-1ae40-0xb0 firmware
- siemens 6es7314-6eh04-0ab0 simatic s7-314
- siemens 6es7314-6eh04-0ab0 firmware
- wago 750-8100 controller pfc100
- wago 750-831 controller bacnet/ip
- wago 750-880 controller eth
- wago 750-889 controller knx ip
- wago bacnet\/ip firmware
- wago ethernet firmware
- wago knx ip firmware
- wago pfc100 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10953 is a high vulnerability (CVSS 7.5) in Abb 1sap120600r0071 Pm554-tp-eth, published April 17, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.46%, the 89th percentile. No source names a fixed version.