{"id":"CVE-2019-18336","aliases":["EUVD-2019-8125","GHSA-q53p-vg4g-3rxp"],"status":"published","title":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003c V3.X.17), SIMATIC TDC CP51M1 (All versions \u003c V1.1.8), SIMATIC TDC CPU555 (All versions \u003c V1.1.1), SINUMERIK 840D sl (All versions \u003c V4.8.6), SINUMERIK 840D sl (All versions \u003c V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01716,"percentile":0.77619,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2020-03-10T19:16:17Z","modified":"2026-06-17T02:24:51Z","products":[{"vendor":"siemens","product":"simatic s7-300 cpu family (incl. related et200 cpus and siplus variants)"},{"vendor":"siemens","product":"simatic tdc cp51m1"},{"vendor":"siemens","product":"simatic tdc cpu555"},{"vendor":"siemens","product":"simatic_s7-300_cpu_312_ifm_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_313_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_314_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_314_ifm_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_315-2_dp_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_315_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_316-2_dp_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_318-2_firmware"},{"vendor":"siemens","product":"simatic_s7-300_cpu_firmware"},{"vendor":"siemens","product":"simatic_tdc_cp51m1_firmware"},{"vendor":"siemens","product":"simatic_tdc_cpu555_firmware"},{"vendor":"siemens","product":"sinumerik 840d sl"},{"vendor":"siemens","product":"sinumerik_840d_sl"},{"vendor":"siemens ag","product":"simatic s7-300 cpu family (incl. related et200 cpus and siplus variants)"},{"vendor":"siemens ag","product":"simatic tdc cp51m1"},{"vendor":"siemens ag","product":"simatic tdc cpu555"},{"vendor":"siemens ag","product":"sinumerik 840d sl"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-508982.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18336"},{"url":"https://github.com/advisories/GHSA-q53p-vg4g-3rxp"}],"sources":{"cve":[{"id":"CVE-2019-18336","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003c V3.X.17), SIMATIC TDC CP51M1 (All versions \u003c V1.1.8), SIMATIC TDC CPU555 (All versions \u003c V1.1.1), SINUMERIK 840D sl (All versions \u003c V4.8.6), SINUMERIK 840D sl (All versions \u003c V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.","status":"published","published":"2020-03-10T19:16:17Z","modified":"2026-06-02T18:36:21.59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-8125","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003c V3.X.17), SIMATIC TDC CP51M1 (All versions \u003c V1.1.8), SIMATIC TDC CPU555 (All versions \u003c V1.1.1), SINUMERIK 840D sl (All versions \u003c V4.8.6), SINUMERIK 840D sl (All versions \u003c V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.","status":"published","published":"2020-03-10T19:16:17Z","modified":"2026-06-02T18:36:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:55.651138Z"}],"ghsa":[{"id":"GHSA-q53p-vg4g-3rxp","title":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003c V3.X.17), SINUMERIK 840D sl (All versions). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.","status":"published","published":"2022-05-24T17:10:35Z","modified":"2026-06-02T21:31:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:08:30.717444Z"}],"nvd":[{"id":"CVE-2019-18336","description":"A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003c V3.X.17), SIMATIC TDC CP51M1 (All versions \u003c V1.1.8), SIMATIC TDC CPU555 (All versions \u003c V1.1.1), SINUMERIK 840D sl (All versions \u003c V4.8.6), SINUMERIK 840D sl (All versions \u003c V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.","status":"published","published":"2020-03-10T20:15:18.633Z","modified":"2026-06-17T02:24:51.573Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:05:45.254119Z"}]}}