CVE-2019-10953

Name: CVE-2019-10953
Creator: NVD / NIST
Published: 2019-04-17T15:29:00.843+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 3.67%

Last modified Jun 17, 2026

CVE-2019-10953 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.. EPSS estimates a 3.67% chance of exploitation in the next 30 days.

Description

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability

3.67%

88.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Abb	Pm554-Tp-Eth Firmware	All versions
Phoenixcontact	Ilc 151 Eth Firmware	All versions
Schneider-Electric	Modicon M221 Firmware	< 1.10.0.0
Siemens	6es7211-1ae40-0xb0 Firmware	All versions
Siemens	6es7314-6eh04-0ab0 Firmware	All versions
Siemens	6ed1052-1cc01-0ba8 Firmware	All versions
Wago	Knx Ip Firmware	All versions
Wago	Pfc100 Firmware	All versions
Wago	Ethernet Firmware	All versions
Wago	Bacnet\/Ip Firmware	All versions

References

http://www.securityfocus.com/bid/108413Third Party Advisory, VDB Entry
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2019/icsa-19-106-03.json
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-03Mitigation, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/108413Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-106-03Mitigation, Third Party Advisory, US Government Resource

Timeline

Published: Apr 17, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-10953?

How severe is CVE-2019-10953?

CVE-2019-10953 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 3.67% probability of exploitation in the next 30 days.

How do I fix CVE-2019-10953?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-10953?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST