CVE-2019-13946Network attack vector

Service interruption via unbounded diagnostic request allocation

Published Feb 11, 2020 · Updated Aug 5, 2024

Uncontrolled resource consumption in Siemens PNIO stack before V06.00 allows remote attackers to interrupt affected devices. The DCE-RPC diagnostic handler allocates internal resources for each legitimate package request without enforcing a sufficient limit, so repeated requests deplete device memory. Network access to UDP port 34964 is sufficient; no authentication or user interaction is required, and the bounded consequence is loss of device availability.

CVSS severity7.5
High
EPSS probability1.46%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Uncontrolled resource consumption in Siemens PNIO stack before V06.00 allows remote attackers to interrupt affected devices. The DCE-RPC diagnostic handler allocates internal resources for each legitimate package request without enforcing a sufficient limit, so repeated requests deplete device memory. Network access to UDP port 34964 is sufficient; no authentication or user interaction is required, and the bounded consequence is loss of device availability.

The record

CVE
CVE-2019-13946
Published
Feb 11, 2020
Updated
Aug 5, 2024
Vendor
Siemens
Product
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
Classifications
CWE-400, T1499
Attack vector
network
Privileges
unauthenticated

Timeline

How it unfolded

  1. Feb 11, 2020CVE publishedPublication date reported by the CVE source.
  2. Aug 5, 2024Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=All versions

What conditions does exploitation require?

Attack vectornetwork
Required privilegesunauthenticated

What is affected?

Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12version=All versions
Siemens · SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12version=All versions
Siemens · SCALANCE X307-2 EEC (2x 230V)version=All versions < V4.1.4
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12version=All versions
Siemens · SIMATIC MV420 SR-P Bodyversion=0 <V7.0.6
Siemens · SIPLUS ET 200MP IM 155-5 PN STversion=0 <V4.1.0
Siemens · SCALANCE X212-2LDversion=All versions < V5.2.5
Siemens · SCALANCE X204IRT PROversion=All Versions < V5.3
Siemens · SCALANCE X308-2Mversion=All versions < V4.1.4
Siemens · SCALANCE XR324-4M PoE (230V, ports on front)version=All versions < V4.1.4
Siemens · SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12version=All versions
Siemens · SCALANCE X202-2P IRTversion=All Versions < V5.3
Siemens · SCALANCE X204-2FMversion=All versions < V5.2.5
Siemens · SIMATIC CP 343-1 Leanversion=All versions
Siemens · SCALANCE XR324-12M (24V, ports on front)version=All versions < V4.1.4
Siemens · SIMATIC MV440 SRversion=0 <V7.0.6
Siemens · Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controllerversion=0 <*
Siemens · SCALANCE XC-200version=All Versions < V3.0
Siemens · SCALANCE X307-3LDversion=All versions < V4.1.4
Siemens · SCALANCE X302-7 EEC (24V)version=All versions < V4.1.4
Siemens · SCALANCE XF204-2version=All versions < V5.2.5
Siemens · SCALANCE XR324-4M PoE (24V, ports on rear)version=All versions < V4.1.4
Siemens · SIPLUS ET 200MP IM 155-5 PN HFversion=0 <V4.2.0
Siemens · PROFINET Driver for Controllerversion=All Versions < V2.1
Siemens · SCALANCE XR324-4M EEC (2x 24V, ports on front)version=All versions < V4.1.4
Siemens · SCALANCE X320-1 FEversion=All versions < V4.1.4
Siemens · SCALANCE X204-2TSversion=All versions < V5.2.5
Siemens · SIMATIC ET 200MP IM 155-5 PN HFversion=0 <V4.2.0
Siemens · SIPLUS NET CP 343-1 Leanversion=All versions
Siemens · SCALANCE X302-7 EEC (2x 230V, coated)version=All versions < V4.1.4
Siemens · SCALANCE X204-2version=All versions < V5.2.5
Siemens · SCALANCE XR324-12M (230V, ports on rear)version=All versions < V4.1.4
Siemens · SCALANCE X310FEversion=All versions < V4.1.4
Siemens · SIMATIC MV420 SR-B Bodyversion=0 <V7.0.6
Siemens · SCALANCE X307-2 EEC (2x 24V)version=All versions < V4.1.4
Siemens · SCALANCE XR324-4M EEC (24V, ports on front)version=All versions < V4.1.4
Siemens · SCALANCE XR324-12M (24V, ports on rear)version=All versions < V4.1.4
Siemens · SCALANCE X206-1version=All versions < V5.2.5
Siemens · SIMATIC RF180Cversion=All versions
Siemens · SCALANCE X204-2LDversion=All versions < V5.2.5
Siemens · SCALANCE XR324-4M PoE (24V, ports on front)version=All versions < V4.1.4
Siemens · SIMATIC ET 200MP IM 155-5 PN STversion=0 <V4.1.0
Siemens · SIMATIC ET 200SP IM 155-6 PN HFversion=0 <V4.2.0
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12version=All versions
Siemens · SIMATIC CP 443-1 OPC UAversion=All versions
Siemens · SCALANCE XF204IRTversion=All Versions < V5.3
Siemens · SCALANCE X302-7 EEC (2x 24V)version=All versions < V4.1.4
Siemens · SCALANCE XM-400version=All Versions < V6.0
Siemens · SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12version=All versions
Siemens · SIMATIC MV440 HRversion=0 <V7.0.6
Siemens · SCALANCE X206-1LDversion=All versions < V5.2.5
Siemens · SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12version=All versions
Siemens · SIMATIC ET200Sversion=All versions
Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)version=All versions < V4.1.4
Siemens · SCALANCE X202-2P IRT PROversion=All Versions < V5.3
Siemens · SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12version=All versions
Siemens · SCALANCE X307-2 EEC (24V, coated)version=All versions < V4.1.4
Siemens · SCALANCE X204-2LD TSversion=All versions < V5.2.5
Siemens · SCALANCE W-700 IEEE 802.11n familyversion=All versions <= V6.0.1
Siemens · SIMATIC ET 200SP IM 155-6 PN ST BAversion=0 <V4.1.0
Siemens · SCALANCE X310version=All versions < V4.1.4
Siemens · SIMATIC ET 200M IM 153-4 PN IO HFversion=All versions
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12version=All versions
Siemens · SIPLUS NET CP 443-1version=0 <V3.3
Siemens · SCALANCE M874-3version=All versions < V4.3
Siemens · SIPLUS ET 200SP IM 155-6 PN STversion=0 <V4.1.0
Siemens · SCALANCE X204IRTversion=All Versions < V5.3
Siemens · SCALANCE X202-2IRTversion=All Versions < V5.3
Siemens · SCALANCE X216version=All versions < V5.2.5
Siemens · SCALANCE X302-7 EEC (230V)version=All versions < V4.1.4
Siemens · SCALANCE XF202-2P IRTversion=All Versions < V5.3
Siemens · SCALANCE X208PROversion=All versions < V5.2.5
Siemens · SCALANCE X308-2version=All versions < V4.1.4
Siemens · SIMATIC CP 343-1 ERPCversion=All versions
Siemens · SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12version=All versions
Siemens · SCALANCE XR324-12M TS (24V)version=All versions < V4.1.4
Siemens · SIMATIC IPC Support, Package for VxWorksversion=0 <*
Siemens · SCALANCE X302-7 EEC (2x 24V, coated)version=All versions < V4.1.4
Siemens · SCALANCE XR324-4M PoE (230V, ports on rear)version=All versions < V4.1.4
Siemens · SCALANCE X224version=All versions < V5.2.5
Siemens · SIMATIC CP 343-1 Advancedversion=All versions
Siemens · SIPLUS ET 200MP IM 155-5 PN ST TX RAILversion=0 <V4.1.0
Siemens · SCALANCE X302-7 EEC (230V, coated)version=All versions < V4.1.4
Siemens · SIMATIC ET 200M IM 153-4 PN IO STversion=All versions
Siemens · SIMATIC MV420 SR-Bversion=0 <V7.0.6
Siemens · SCALANCE M812-1 ADSL Routerversion=All versions < V4.3
Siemens · SIMATIC RF182Cversion=All versions
Siemens · SCALANCE XR-500version=All Versions < V6.0
Siemens · SCALANCE X208version=All versions < V5.2.5
Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)version=All versions < V4.1.4
Siemens · SIPLUS NET CP 343-1 Advancedversion=All versions
Siemens · SCALANCE XR324-4M EEC (24V, ports on rear)version=All versions < V4.1.4
Siemens · SCALANCE X201-3P IRT PROversion=All Versions < V5.3
Siemens · SIPLUS ET 200MP IM 155-5 PN HF T1 RAILversion=0 <V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HFversion=0 <V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BAversion=0 <V4.1.0
Siemens · SCALANCE X302-7 EEC (24V, coated)version=All versions < V4.1.4
Siemens · SCALANCE X307-3version=All versions < V4.1.4
Siemens · SCALANCE M826-2 SHDSL-Routerversion=All versions < V4.3
Siemens · SCALANCE M816-1 ADSL Routerversion=All versions < V4.3
Siemens · SCALANCE X307-2 EEC (24V)version=All versions < V4.1.4
Siemens · SIMATIC ET200ecoPN: IO-Link Masterversion=All versions
Siemens · SCALANCE XP-200version=All Versions < V3.0
Siemens · SCALANCE M876-3 (ROK)version=All versions < V4.3
Siemens · SCALANCE X308-2LH+version=All versions < V4.1.4
Siemens · SCALANCE X308-2M PoEversion=All versions < V4.1.4
Siemens · SCALANCE X307-2 EEC (230V, coated)version=All versions < V4.1.4
Siemens · SCALANCE M876-3version=All versions < V4.3
Siemens · SCALANCE XB-200version=All Versions < V3.0
Siemens · SCALANCE XF201-3P IRTversion=All Versions < V5.3
Siemens · SIMATIC CP 443-1version=0 <V3.3
Siemens · SINAMICS DCPversion=All Versions < V1.3
Siemens · SIMATIC ET 200pro IM 154-3 PN HFversion=0 <*
Siemens · SIPLUS NET CP 343-1version=All versions
Siemens · SIMATIC MV440 URversion=0 <V7.0.6
Siemens · SCALANCE XR324-4M EEC (2x 24V, ports on rear)version=All versions < V4.1.4
Siemens · SIMATIC ET 200AL IM 157-1 PNversion=All versions
Siemens · SCALANCE X302-7 EEC (2x 230V)version=All versions < V4.1.4
Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAILversion=0 <V4.1.0
Siemens · SCALANCE XF-200BAversion=All Versions < V3.0
Siemens · SCALANCE XF208version=All versions < V5.2.5
Siemens · SCALANCE XF204-2BA IRTversion=All Versions < V5.3
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200Pversion=All Versions < V4.6
Siemens · SIMATIC ET 200SP IM 155-6 PN STversion=0 <V4.1.0
Siemens · SIPLUS NET CP 443-1 Advancedversion=0 <V3.3
Siemens · SIMATIC ET 200SP IM 155-6 PN BAversion=0 <*
Siemens · RUGGEDCOM RM1224version=All versions < V4.3
Siemens · SCALANCE M804PBversion=All versions < V4.3
Siemens · SCALANCE XF204version=All versions < V5.2.5
Siemens · SOFTNET-IE PNIOversion=All versions
Siemens · SIMOTION Dversion=All versions < V4.5
Siemens · SCALANCE X308-2M TSversion=All versions < V4.1.4
Siemens · SCALANCE XR-300WGversion=All Versions < V3.0
Siemens · SIMATIC CP 443-1 Advancedversion=0 <V3.3
Siemens · SCALANCE X307-2 EEC (230V)version=All versions < V4.1.4
Siemens · SIMATIC MV420 SR-Pversion=0 <V7.0.6
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAILversion=0 <V4.1.0
Siemens · SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)version=All versions < V4.1.4
Siemens · SCALANCE X307-2 EEC (2x 230V, coated)version=All versions < V4.1.4
Siemens · SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)version=All versions < V4.1.4
Siemens · SCALANCE X306-1LD FEversion=All versions < V4.1.4
Siemens · SIPLUS ET 200SP IM 155-6 PN HF T1 RAILversion=0 <V4.2.0
Siemens · SCALANCE XR324-12M (230V, ports on front)version=All versions < V4.1.4
Siemens · SCALANCE M876-4 (NAM)version=All versions < V4.3
Siemens · SCALANCE X304-2FEversion=All versions < V4.1.4
Siemens · SIMATIC PN/PN Couplerversion=All Versions
Siemens · SIMOTION Pversion=All versions < V4.5
Siemens · SCALANCE X308-2LDversion=All versions < V4.1.4
Siemens · SIMOTION Cversion=All versions < V4.5
Siemens · SCALANCE X307-2 EEC (2x 24V, coated)version=All versions < V4.1.4
Siemens · SCALANCE X201-3P IRTversion=All Versions < V5.3
Siemens · SCALANCE X320-1-2LD FEversion=All versions < V4.1.4
Siemens · SCALANCE X408-2version=All versions < V4.1.4
Siemens · SCALANCE XF206-1version=All versions < V5.2.5
Siemens · SIMATIC ET200ecoPN, 4AO U/I 4xM12version=All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12version=All versions
Siemens · SCALANCE XR324-4M PoE TS (24V, ports on front)version=All versions < V4.1.4
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200version=All Versions < V4.5
Siemens · SIMATIC ET 200pro IM 154-4 PN HFversion=All versions
Siemens · SCALANCE S615 LAN-Routerversion=All versions < V4.3
Siemens · SCALANCE X200-4P IRTversion=All Versions < V5.3
Siemens · SCALANCE M876-4 (EU)version=All versions < V4.3
Siemens · SIMATIC CP 343-1version=All versions
Siemens · SCALANCE X212-2version=All versions < V5.2.5
Siemens · SIPLUS NET SCALANCE X308-2version=All versions < V4.1.4
Siemens · SCALANCE M874-2version=All versions < V4.3
Siemens · SIMATIC RF600R familyversion=All versions < V3

Published CVSS scores

7.8NIST NVDAV:N/AC:L/Au:N/C:N/I:N/A:C
7.5Siemens AGCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 9, 2026Sep 15, 2026
Latest reporting daySep 15, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectornetwork
Privilegesunauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-400Uncontrolled Resource Consumption
T1499Endpoint Denial of Service

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo