CVE-2019-10937

A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

• CWE-20
• CWE-20

• https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdfPatch, Vendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-253-05
• https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdfPatch, Vendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-19-253-05

Published

Sep 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10930A vulnerability has been identified in All other SIPROTEC 5 …
• CVE-2019-10931A vulnerability has been identified in All other SIPROTEC 5 …7.5
• CVE-2019-10933A vulnerability has been identified in Spectrum Power 3 (Cor…
• CVE-2019-10934A vulnerability has been identified in TIA Portal V14 (All v…7.8
• CVE-2019-10935A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…
• CVE-2019-10936Affected devices improperly handle large amounts of speciall…7.5
• CVE-2019-10938A vulnerability has been identified in SIPROTEC 5 devices wi…9.8
• CVE-2019-10939A vulnerability has been identified in TIM 3V-IE (incl. SIPL…9.8
• CVE-2019-1094An information disclosure vulnerability exists when the Wind…
• CVE-2019-10940A vulnerability has been identified in SINEMA Server (All ve…9.9
• CVE-2019-10941A vulnerability has been identified in SINEMA Server (All ve…5.3
• CVE-2019-10942A vulnerability has been identified in SCALANCE X-200 switch…8.6