Skip to content
Fencer Vulns
high 7.5

CVE-2019-19301 json

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X…

published 2020-04-14 6 y ago modified 2026-06-17 4 mo ago also EUVD-2019-8925

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.4%
EPSS 1.4% chance of exploitation in 30 days, percentile 71%
public exploits
0
none known

Summary

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANCE X204-2LD, SCALANCE X204-2LD TS, SCALANCE X204-2TS, SCALANCE X204IRT, SCALANCE X204IRT PRO, SCALANCE X206-1, SCALANCE X206-1LD, SCALANCE X208, SCALANCE X208PRO, SCALANCE X212-2, SCALANCE X212-2LD, SCALANCE X216, SCALANCE X224, SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XF201-3P IRT, SCALANCE XF202-2P IRT, SCALANCE XF204, SCALANCE XF204-2, SCALANCE XF204-2BA IRT, SCALANCE XF204IRT, SCALANCE XF206-1, SCALANCE XF208, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIMATIC CP 343-1 Advanced, SIMATIC CP 442-1 RNA, SIMATIC CP 443-1, SIMATIC CP 443-1, SIMATIC CP 443-1 Advanced, SIMATIC CP 443-1 RNA, SIMATIC RF180C, SIMATIC RF182C, SIPLUS NET CP 343-1 Advanced, SIPLUS NET CP 443-1, SIPLUS NET CP 443-1 Advanced, SIPLUS NET SCALANCE X308-2. The VxWorks-based Profinet TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service.

Patch / fix

  • siemens scalance_x-200irt_firmware 5.5.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-20-105-07 updated cvss 7.5

Siemens SCALANCE and SIMATIC (Update H)

  • Siemens SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) <V5.5.0 Siemens SCALANCE X201-3P IRT (6GK5201-3BH00-2BA3) <V5.5.0 Siemens SCALANCE X201-3P IRT PRO (6GK5201-3JR00-2BA6) <V5.5.0 Siemens SCALANCE X202-2IRT (6GK5202-2BB00-2BA3) <V5.5.0 Siemens SCALANCE X202-2P IRT (6GK5202-2BH00-2BA3) <V5.5.0 Siemens SCALANCE X202-2P IRT PRO (6GK5202-2JR00-2BA6) <V5.5.0
    affected: fixed in V5.5.0, mitigation support.industry.siemens.com
  • Siemens SCALANCE X204-2 (6GK5204-2BB10-2AA3) <V5.2.5 Siemens SCALANCE X204-2FM (6GK5204-2BB11-2AA3) <V5.2.5 Siemens SCALANCE X204-2LD (6GK5204-2BC10-2AA3) <V5.2.5 Siemens SCALANCE X204-2LD TS (6GK5204-2BC10-2CA2) <V5.2.5 Siemens SCALANCE X204-2TS (6GK5204-2BB10-2CA2) <V5.2.5
    affected: fixed in V5.2.5, mitigation support.industry.siemens.com
  • Siemens SCALANCE X204IRT (6GK5204-0BA00-2BA3) <V5.5.0 Siemens SCALANCE X204IRT PRO (6GK5204-0JA00-2BA6) <V5.5.0
    affected: fixed in V5.5.0, mitigation support.industry.siemens.com
  • Siemens SCALANCE X206-1 (6GK5206-1BB10-2AA3) <V5.2.5 Siemens SCALANCE X206-1LD (6GK5206-1BC10-2AA3) <V5.2.5 Siemens SCALANCE X208 (6GK5208-0BA10-2AA3) <V5.2.5 Siemens SCALANCE X208PRO (6GK5208-0HA10-2AA6) <V5.2.5 Siemens SCALANCE X212-2 (6GK5212-2BB00-2AA3) <V5.2.5 Siemens SCALANCE X212-2LD (6GK5212-2BC00-2AA3) <V5.2.5
    +2 more products
    Siemens SCALANCE X216 (6GK5216-0BA00-2AA3) <V5.2.5 Siemens SCALANCE X224 (6GK5224-0BA00-2AA3) <V5.2.5
    affected: fixed in V5.2.5, mitigation support.industry.siemens.com
  • Siemens SCALANCE X302-7 EEC (2x 24V, coated) (6GK5302-7GD00-2GA3) <V4.1.4 Siemens SCALANCE X302-7 EEC (2x 24V) (6GK5302-7GD00-2EA3) <V4.1.4 Siemens SCALANCE X302-7 EEC (2x 230V, coated) (6GK5302-7GD00-4GA3) <V4.1.4 Siemens SCALANCE X302-7 EEC (2x 230V) (6GK5302-7GD00-4EA3) <V4.1.4 Siemens SCALANCE X302-7 EEC (24V, coated) (6GK5302-7GD00-1GA3) <V4.1.4 Siemens SCALANCE X302-7 EEC (24V) (6GK5302-7GD00-1EA3) <V4.1.4
    +13 more products
    Siemens SCALANCE X302-7 EEC (230V, coated) (6GK5302-7GD00-3GA3) <V4.1.4 Siemens SCALANCE X302-7 EEC (230V) (6GK5302-7GD00-3EA3) <V4.1.4 Siemens SCALANCE X304-2FE (6GK5304-2BD00-2AA3) <V4.1.4 Siemens SCALANCE X306-1LD FE (6GK5306-1BF00-2AA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (2x 24V, coated) (6GK5307-2FD00-2GA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (2x 24V) (6GK5307-2FD00-2EA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (2x 230V, coated) (6GK5307-2FD00-4GA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (2x 230V) (6GK5307-2FD00-4EA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (24V, coated) (6GK5307-2FD00-1GA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (24V) (6GK5307-2FD00-1EA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (230V, coated) (6GK5307-2FD00-3GA3) <V4.1.4 Siemens SCALANCE X307-2 EEC (230V) (6GK5307-2FD00-3EA3) <V4.1.4 Siemens SCALANCE X307-3 (6GK5307-3BL00-2AA3) <V4.1.4
    affected: fixed in V4.1.4, mitigation support.industry.siemens.com

75 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

1.36% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • Siemens SCALANCE X200-4P IRT
  • Siemens SCALANCE X201-3P IRT
  • Siemens SCALANCE X201-3P IRT PRO
  • Siemens SCALANCE X202-2IRT
  • Siemens SCALANCE X202-2P IRT
  • Siemens SCALANCE X202-2P IRT PRO
  • Siemens SCALANCE X204-2
  • Siemens SCALANCE X204-2FM
  • Siemens SCALANCE X204-2LD
  • Siemens SCALANCE X204-2LD TS
  • Siemens SCALANCE X204-2TS
  • Siemens SCALANCE X204IRT
  • Siemens SCALANCE X204IRT PRO
  • Siemens SCALANCE X206-1
  • Siemens SCALANCE X206-1LD
  • Siemens SCALANCE X208
  • Siemens SCALANCE X208PRO
  • Siemens SCALANCE X212-2
  • Siemens SCALANCE X212-2LD
  • Siemens SCALANCE X216
  • Siemens SCALANCE X224
  • Siemens SCALANCE X302-7 EEC (230V, coated)
  • Siemens SCALANCE X302-7 EEC (230V)
  • Siemens SCALANCE X302-7 EEC (24V, coated)
  • Siemens SCALANCE X302-7 EEC (24V)
  • Siemens SCALANCE X302-7 EEC (2x 230V, coated)
  • Siemens SCALANCE X302-7 EEC (2x 230V)
  • Siemens SCALANCE X302-7 EEC (2x 24V, coated)
  • Siemens SCALANCE X302-7 EEC (2x 24V)
  • Siemens SCALANCE X304-2FE
  • Siemens SCALANCE X306-1LD FE
  • Siemens SCALANCE X307-2 EEC (230V, coated)
  • Siemens SCALANCE X307-2 EEC (230V)
  • Siemens SCALANCE X307-2 EEC (24V, coated)
  • Siemens SCALANCE X307-2 EEC (24V)
  • Siemens SCALANCE X307-2 EEC (2x 230V, coated)
  • Siemens SCALANCE X307-2 EEC (2x 230V)
  • Siemens SCALANCE X307-2 EEC (2x 24V, coated)
  • Siemens SCALANCE X307-2 EEC (2x 24V)
  • Siemens SCALANCE X307-3
  • Siemens SCALANCE X307-3LD
  • Siemens SCALANCE X308-2
  • Siemens SCALANCE X308-2LD
  • Siemens SCALANCE X308-2LH
  • Siemens SCALANCE X308-2LH+
  • Siemens SCALANCE X308-2M
  • Siemens SCALANCE X308-2M PoE
  • Siemens SCALANCE X308-2M TS
  • Siemens SCALANCE X310
  • Siemens SCALANCE X310FE

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.