CVE-2019-13927

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (All firmware versions < V6.00.320), Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 (All firmware versions < V6.00.320), Desigo PX automation controllers PXC22.1-E.D, PXC36-E.D, PXC36.1-E.D with activated web server (All firmware versions < V6.00.320). The device contains a vulnerability that could allow an attacker to cause a denial of service condition on the device's web server by sending a specially crafted HTTP message to the web server port (tcp/80). The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device's web service. While the device itself stays operational, the web server responds with HTTP status code 404 (Not found) to any further request. A reboot is required to recover the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.

• CWE-472
• CWE-668

• https://cert-portal.siemens.com/productcert/pdf/ssa-898181.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-898181.pdfVendor Advisory

Published

Dec 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13921A vulnerability has been identified in SIMATIC WinAC RTX (F)…7.5
• CVE-2019-13922A vulnerability has been identified in SINEMA Remote Connect…2.7
• CVE-2019-13923A vulnerability has been identified in IE/WSN-PA Link Wirele…9.6
• CVE-2019-13924A vulnerability has been identified in SCALANCE S602 (All ve…5.4
• CVE-2019-13925A vulnerability has been identified in SCALANCE S602 (All ve…7.5
• CVE-2019-13926A vulnerability has been identified in SCALANCE S602 (All ve…7.5
• CVE-2019-13929A vulnerability has been identified in SIMATIC IT UADM (All …6.5
• CVE-2019-1393An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2019-13930A vulnerability has been identified in XHQ (All versions < V…8.1
• CVE-2019-13931A vulnerability has been identified in XHQ (All versions < V…5.4
• CVE-2019-13932A vulnerability has been identified in XHQ (All versions < V…9.1
• CVE-2019-13933A vulnerability has been identified in SCALANCE X204RNA (HSR…8.6