A vulnerability was found in Siemens SIMATIC S7-1200 CPU, SIMATIC S7-300 PN-DP CPU and SIMATIC S7-400 PN-DP V7 CPU up to V4.1) (SCADA Software). It has been rated as problematic. This issue affects an unknown function of the component Web Server. The manipulation as part of a HTTP Requests leads to a resource consumption vulnerability. Using CWE to declare the problem leads to CWE-400. The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. Impacted is availability. The summary by CVE is:

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 PN/DP CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions). Affected devices contain a vulnerability that could cause a Denial-of-Service condition of the web server by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device&acirc;&euro;&trade;s web server. Beyond the web service, no other functions or interfaces are affected by the Denial-of-Service condition.

The weakness was published 02/11/2020. The identification of this vulnerability is CVE-2019-13940 since 07/18/2019. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 02/12/2020). The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

Addressing this vulnerability is possible by firewalling .

Similar entries are available at VDB-251212, VDB-251213, VDB-251214 and VDB-256720.

Productinfo

Type

• SCADA Software

Vendor

• Siemens

Name

• SIMATIC S7-300 PN-DP CPU
• SIMATIC S7-400 PN-DP V7 CPU
• SIMATIC S7-1200 CPU

Version

• V4.1)

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion