A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (…

published 2020-02-11 6y ago modified 2026-06-17 4mo ago also EUVD-2019-5207

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.7%; EPSS 1.7% chance of exploitation in 30 days, percentile 77%
public exploits: 0; none known

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.

Beyond the web service, no other functions or interfaces are affected by the denial of service condition.

Patch / fix

fixed in 12

siemens s7-1200_cpu_1211c_firmware 4.1
siemens s7-1200_cpu_1212c_firmware 4.1
siemens s7-1200_cpu_1214c_firmware 4.1
siemens s7-1200_cpu_1215c_firmware 4.1
siemens s7-1200_cpu_1217c_firmware 4.1
siemens s7-1200_cpu_1212fc_firmware 4.1
siemens s7-1200_cpu_1214fc_firmware 4.1
siemens s7-1200_cpu_1215fc_firmware 4.1
siemens siplus_s7-1200_firmware 4.1
siemens siplus_cpu_1211c_firmware 4.1
siemens siplus_cpu_1212c_firmware 4.1
siemens siplus_cpu_1215c_firmware 4.1

Is CVE-2019-13940 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-20-042-05 updated 2023-01-10 cvss 5.3

Siemens SIMATIC S7 (Update B)

Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU (6ES7154-8AB01-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU (6ES7154-8FB01-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200S IM151-8 PN/DP CPU (6ES7151-8AB01-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC ET 200S IM151-8F PN/DP CPU (6ES7151-8FB01-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 314C-2 PN/DP (6ES7314-6EH04-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 315-2 PN/DP (6ES7315-2EH14-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 315F-2 PN/DP (6ES7315-2FJ14-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com

show 17 more

Siemens SIMATIC S7-300 CPU 315T-3 PN/DP (6ES7315-7TJ10-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 317-2 PN/DP (6ES7317-2EK14-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 317F-2 PN/DP (6ES7317-2FK14-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 317T-3 PN/DP (6ES7317-7TK10-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP (6ES7317-7UL10-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 319-3 PN/DP (6ES7318-3EL01-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-300 CPU 319F-3 PN/DP (6ES7318-3FL01-0AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
affected: mitigation, no fix planned
Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) <V4.1
affected: fixed in V4.1, mitigation support.industry.siemens.com
Siemens SIMATIC WinAC RTX 2010 (6ES7671-0RC08-0YA0) Siemens SIMATIC WinAC RTX F 2010 (6ES7671-1RC08-0YA0)
affected: mitigation, no fix planned
Siemens SIPLUS ET 200S IM151-8 PN/DP CPU (6AG1151-8AB01-7AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIPLUS ET 200S IM151-8F PN/DP CPU (6AG1151-8FB01-2AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIPLUS S7-300 CPU 314C-2 PN/DP (6AG1314-6EH04-7AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIPLUS S7-300 CPU 315-2 PN/DP (6AG1315-2EH14-7AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIPLUS S7-300 CPU 315F-2 PN/DP (6AG1315-2FJ14-2AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIPLUS S7-300 CPU 317-2 PN/DP (6AG1317-2EK14-7AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com
Siemens SIPLUS S7-300 CPU 317F-2 PN/DP (6AG1317-2FK14-2AB0) <V3.X.17
affected: fixed in V3.X.17, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

1.70% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
CNA	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD	3.1	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Siemens SIMATIC ET 200pro IM154-8 PN/DP CPU
Siemens SIMATIC ET 200pro IM154-8F PN/DP CPU
Siemens SIMATIC ET 200pro IM154-8FX PN/DP CPU
Siemens SIMATIC ET 200S IM151-8 PN/DP CPU
Siemens SIMATIC ET 200S IM151-8F PN/DP CPU
Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Siemens SIMATIC S7-300 CPU 314C-2 PN/DP
Siemens SIMATIC S7-300 CPU 315-2 PN/DP
Siemens SIMATIC S7-300 CPU 315F-2 PN/DP
Siemens SIMATIC S7-300 CPU 315T-3 PN/DP
Siemens SIMATIC S7-300 CPU 317-2 PN/DP
Siemens SIMATIC S7-300 CPU 317F-2 PN/DP
Siemens SIMATIC S7-300 CPU 317T-3 PN/DP
Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP
Siemens SIMATIC S7-300 CPU 319-3 PN/DP
Siemens SIMATIC S7-300 CPU 319F-3 PN/DP
Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
Siemens SIMATIC WinAC RTX 2010
Siemens SIMATIC WinAC RTX F 2010
Siemens SIPLUS ET 200S IM151-8 PN/DP CPU
Siemens SIPLUS ET 200S IM151-8F PN/DP CPU
Siemens SIPLUS S7-300 CPU 314C-2 PN/DP
Siemens SIPLUS S7-300 CPU 315-2 PN/DP
Siemens SIPLUS S7-300 CPU 315F-2 PN/DP
Siemens SIPLUS S7-300 CPU 317-2 PN/DP
Siemens SIPLUS S7-300 CPU 317F-2 PN/DP

Classification

Weakness

CWE-400 Uncontrolled Resource Consumption

References

cert-portal.siemens.com /productcert/pdf/ssa-431678.pdf
vendor-advisory

Sources

CVE List CVE-2019-13940
NVD CVE-2019-13940

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

json all entries feed