CVE-2019-10923

HIGH

Siemens CP1604 Firmware < 2.8 - Denial of Service via IRT Synchronization Disruption

Title source: llm
STIX 2.1

Description

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0047
EPSS Percentile 64.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (47)
siemens/cp1604_firmware < 2.8
siemens/cp1616_firmware < 2.8
siemens/dk_standard_ethernet_controller_firmware 4.1.1 (2 CPE variants)
siemens/dk_standard_ethernet_controller_firmware < 4.1.1
siemens/ek-ertec_200_firmware 4.5.0
siemens/ek-ertec_200_firmware < 4.5.0
siemens/ek-ertec_200p_firmware < 4.5.0
siemens/scalance_x-200irt_firmware < 5.2.1
siemens/simatic_et_200ecopn_firmware
siemens/simatic_et_200m_firmware
... and 37 more
Published Oct 10, 2019
Tracked Since Feb 18, 2026