Skip to content
Fencer Intel
high 7.5

CVE-2019-19281 json

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

published 6y ago modified 4mo ago also EUVD-2019-8905

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.7%
EPSS 1.7% chance of exploitation in 30 days, percentile 77%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.

Patch / fix

  • siemens simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware 20.8
  • siemens simatic_s7-1500_cpu_1511-1_pn_firmware 2.8
  • siemens simatic_s7-1500_cpu_1513-1_pn_firmware 2.8
  • siemens simatic_s7-1500_cpu_1515-2_pn_firmware 2.8
  • siemens simatic_s7-1500_cpu_1516-3_pn_firmware 2.8
  • siemens simatic_s7-1500_cpu_1516-3_dp_firmware 2.8
  • siemens simatic_s7-1500_cpu_1517-3_pn_firmware 2.8
  • siemens simatic_s7-1500_cpu_1517-3_dp_firmware 2.8
  • siemens simatic_s7-1500_cpu_1518-4_pn_firmware 2.8
  • siemens simatic_s7-1500_cpu_1518-4_dp_firmware 2.8
  • siemens simatic_s7-1500_cpu_1507s_firmware 20.8
  • siemens simatic_s7-1500_cpu_1508s_firmware 20.8
  • siemens simatic_s7-1500_cpu_1507s_f_firmware 20.8
  • siemens simatic_s7-1500_cpu_1508s_f_firmware 20.8

Is CVE-2019-19281 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-20-042-11 updated cvss 7.5

Siemens SIMATIC S7-1500 (Update A)

  • Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) >=V2.5_and_<V20.8
    affected: fixed in V20.8, mitigation
  • Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) >=V2.5_and_<V2.8
    affected: fixed in V2.8, mitigation
  • Siemens SIMATIC S7-1500 Software Controller >=V2.5_and_<V20.8
    affected: fixed in V20.8, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

1.68% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

  • Siemens AG SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
  • Siemens AG SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
  • Siemens AG SIMATIC S7-1500 Software Controller

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.