CVE-2019-19281

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.

• CWE-400
• CWE-400

• https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-042-11
• https://cert-portal.siemens.com/productcert/pdf/ssa-750824.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-042-11

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19275typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bo…7.5
• CVE-2019-19276A vulnerability has been identified in SIMATIC HMI Comfort P…5.3
• CVE-2019-19277A vulnerability has been identified in SIPORT MP (All versio…6.5
• CVE-2019-19278A vulnerability has been identified in SINAMICS PERFECT HARM…6.8
• CVE-2019-19279A vulnerability has been identified in SIPROTEC 4 and SIPROT…7.5
• CVE-2019-1928Multiple vulnerabilities in Cisco Webex Network Recording Pl…7.8
• CVE-2019-19282A vulnerability has been identified in OpenPCS 7 V8.1 (All v…7.5
• CVE-2019-19283A vulnerability has been identified in XHQ (All Versions < 6…5.3
• CVE-2019-19284A vulnerability has been identified in XHQ (All Versions < 6…5.4
• CVE-2019-19285A vulnerability has been identified in XHQ (All Versions < 6…5.4
• CVE-2019-19286A vulnerability has been identified in XHQ (All Versions < 6…7.2
• CVE-2019-19287A vulnerability has been identified in XHQ (All Versions < 6…6.5