CVE-2019-13939
mediumPriorität · verfolgen · 19EPSS 0.007 · 54. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenAPOGEE PXC Compact (BACnet)siemens_psirt
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)siemens_psirt
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenDesigo PXC00-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC00-Usiemens_psirt
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC001-E.Dsiemens_psirt
Update to V6.00.327 or later version
- BehobenDesigo PXC100-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC12-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC128-Usiemens_psirt
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC200-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC22-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC22.1-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC36.1-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC50-E.Dsiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC64-Usiemens_psirt
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXM20-Esiemens_psirt
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenSIMOTICS CONNECT 400siemens_psirt
Update to V0.3.0.330 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - BehobenTALON TC Compact (BACnet)siemens_psirt
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)siemens_psirt
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenCapital Embedded AR Classic R20-11siemens_psirt
Update to V2303 or later version
- BehobenNucleus ReadyStart V3siemens_psirt
Update to V2017.02.3 or later version
- BehobenNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
- BehobenCapital Embedded AR Classic R20-11cisa_csaf_ot
Update to V2303 or later version
- BehobenNucleus ReadyStart V3cisa_csaf_ot
Update to V2017.02.3 or later version
- BehobenNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
- BehobenAPOGEE PXC Compact (BACnet)cisa_csaf_ot
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)cisa_csaf_ot
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
Update to V2.8.19 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenDesigo PXC00-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC00-Ucisa_csaf_ot
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC001-E.Dcisa_csaf_ot
Update to V6.00.327 or later version
- BehobenDesigo PXC100-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC12-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC128-Ucisa_csaf_ot
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC200-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC22-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC22.1-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC36.1-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC50-E.Dcisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXC64-Ucisa_csaf_ot
Update to V6.00.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenDesigo PXM20-Ecisa_csaf_ot
Update to V6.0.327 or later version
https://support.industry.siemens.com/cs/ww/en/view/109791941/ - BehobenSIMOTICS CONNECT 400cisa_csaf_ot
Update to V0.3.0.330 or later version
https://support.industry.siemens.com/cs/ww/en/view/109778383/ - BehobenTALON TC Compact (BACnet)cisa_csaf_ot
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)cisa_csaf_ot
Update to V3.5.3 or later version
https://partnerportal.extranet.dc.siemens.com/ - MitigationAPOGEE MEC/MBC/PXC (P2)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (BACnet)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (BACnet)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-Usiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC001-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC100-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC12-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC128-Usiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC200-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22.1-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC36.1-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC50-E.Dsiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC64-Usiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXM20-Esiemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationSIMOTICS CONNECT 400siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Compact (BACnet)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Modular (BACnet)siemens_psirt
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationCapital Embedded AR Classic 431-422siemens_psirt
Avoid using DHCP Client of Nucleus NET
- MitigationCapital Embedded AR Classic R20-11siemens_psirt
Avoid using DHCP Client of Nucleus NET
- MitigationNucleus NETsiemens_psirt
Avoid using DHCP Client of Nucleus NET
- MitigationNucleus ReadyStart V3siemens_psirt
Avoid using DHCP Client of Nucleus NET
- MitigationNucleus Source Codesiemens_psirt
Avoid using DHCP Client of Nucleus NET
- MitigationCapital Embedded AR Classic 431-422cisa_csaf_ot
Avoid using DHCP Client of Nucleus NET
- MitigationCapital Embedded AR Classic R20-11cisa_csaf_ot
Avoid using DHCP Client of Nucleus NET
- MitigationNucleus NETcisa_csaf_ot
Avoid using DHCP Client of Nucleus NET
- MitigationNucleus ReadyStart V3cisa_csaf_ot
Avoid using DHCP Client of Nucleus NET
- MitigationNucleus Source Codecisa_csaf_ot
Avoid using DHCP Client of Nucleus NET
- MitigationAPOGEE MEC/MBC/PXC (P2)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (BACnet)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (BACnet)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC00-Ucisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC001-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC100-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC12-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC128-Ucisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC200-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC22.1-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC36.1-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC50-E.Dcisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXC64-Ucisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationDesigo PXM20-Ecisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationSIMOTICS CONNECT 400cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Compact (BACnet)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- MitigationTALON TC Modular (BACnet)cisa_csaf_ot
APOGEE MEC, MBC, PXC (versions prior to V2.8.2): Use static IP address configuration as described above
- Kein Fix geplantAPOGEE MEC/MBC/PXC (P2)siemens_psirt
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422siemens_psirt
Currently no fix is planned
- Kein Fix geplantNucleus NETsiemens_psirt
Currently no fix is planned
- Kein Fix geplantCapital Embedded AR Classic 431-422cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantNucleus NETcisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantAPOGEE MEC/MBC/PXC (P2)cisa_csaf_ot
Currently no fix is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.8–7.1
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (132)
Betroffene Produkte und Versionsbereiche.
Advisories (4)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-162506SSA-162506: DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series2020-04-14csaf · siemens_psirtDE
SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
- SSA-434032SSA-434032: Input Validation Vulnerability in the DHCP Client of Nucleus RTOS2019-11-12csaf · siemens_psirtDE
The DHCP implementation of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability that could allow an attacker to change the IP address of an affected device to an invalid value. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- ICSA-19-318-01Siemens Mentor Nucleus Networking Module2019-11-12icsa · cisa_csaf_otUS
The DHCP implementation of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability that could allow an attacker to change the IP address of an affected device to an invalid value. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- ICSA-20-105-06Siemens SIMOTICS, Desigo, APOGEE, and TALON2020-04-14icsa · cisa_csaf_otUS
SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (22)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2019-13939cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-162506.htmlcnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-434032.htmlcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-162506.pdfcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-434032.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-13939cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-105-06cnnvd
- https://www.auscert.org.au/bulletins/ESB-2019.4317/cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan