CVE-2019-13939

Published: Jan 16, 2020Modified: Jun 17, 2026

7.1

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC00-U (All versions >= V2.3x and < V6.00.327), Desigo PXC001-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC100-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC12-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC128-U (All versions >= V2.3x and < V6.00.327), Desigo PXC200-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC50-E.D (All versions >= V2.3 < V6.0.327), Desigo PXC64-U (All versions >= V2.3x and < V6.00.327), Desigo PXM20-E (All versions >= V2.3 < V6.0.327), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus Source Code (All versions), SIMOTICS CONNECT 400 (All versions < V0.3.0.330), TALON TC Compact (BACnet) (All versions < V3.5.3), TALON TC Modular (BACnet) (All versions < V3.5.3). By sending specially crafted DHCP packets to a device where the DHCP client is enabled, an attacker could change the IP address of the device to an invalid value.

Affected (26)

26 products

Apogee Modular Equiment Controller Firmware

Apogee Modular Building Controller Firmware

Apogee Pxc Firmware

Desigo Pxc Firmware

Desigo Pxm20 Firmware

Simotics Connect 400 Firmware

Talon Tc Firmware

Desigo Pxc00 E.d Firmware

Desigo Pxc00 U Firmware

Desigo Pxc001 E.d Firmware

Desigo Pxc12 E.d Firmware

Desigo Pxc22 E.d Firmware

Desigo Pxc22.1 E.d Firmware

Desigo Pxc36.1 E.d Firmware

Desigopxc50 E.d Firmware

Desigopxc64 U Firmware

Desigopxc100 E.d Firmware

Desigopxc128 U Firmware

Desigopxc200 E.d Firmware

Desigopxm20 E Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Siemens Capital Vstar	All versions
Siemens Nucleus Net	All versions
Siemens Nucleus Readystart	Before 2017.02.2
Siemens Nucleus Rtos	All versions
Siemens Nucleus Safetycert	All versions
Siemens Nucleus Source Code	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Apogee Modular Equiment Controller Firmware	Before 2.8.2

Running on/with	Platform Versions
Siemens Apogee Modular Equiment Controller	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Apogee Modular Building Controller Firmware	Before 2.8.2

Running on/with	Platform Versions
Siemens Apogee Modular Building Controller	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Apogee Pxc Firmware	Up to 2.8.2

Running on/with	Platform Versions
Siemens Apogee Pxc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc Firmware	From 2.3

Running on/with	Platform Versions
Siemens Desigo Pxc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxm20 Firmware	From 2.3

Running on/with	Platform Versions
Siemens Desigo Pxm20	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simotics Connect 400 Firmware	Up to 0.3.0.95

Running on/with	Platform Versions
Siemens Simotics Connect 400	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Talon Tc Firmware	From 3.0

Running on/with	Platform Versions
Siemens Talon Tc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc00 E.d Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc00 E.d	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc00 U Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc00 U	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc001 E.d Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc001 E.d	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc12 E.d Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc12 E.d	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc22 E.d Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc22 E.d	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc22.1 E.d Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc22.1 E.d	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigo Pxc36.1 E.d Firmware	From 2.3.0 to 6.00.327

Running on/with	Platform Versions
Siemens Desigo Pxc36.1 E.d	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigopxc50 E.d Firmware	All versions

Running on/with	Platform Versions
Siemens Desigopxc50 E.d	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigopxc64 U Firmware	All versions

Running on/with	Platform Versions
Siemens Desigopxc64 U	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigopxc100 E.d Firmware	All versions

Running on/with	Platform Versions
Siemens Desigopxc100 E.d	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigopxc128 U Firmware	All versions

Running on/with	Platform Versions
Siemens Desigopxc128 U	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigopxc200 E.d Firmware	All versions

Running on/with	Platform Versions
Siemens Desigopxc200 E.d	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Desigopxm20 E Firmware	All versions

Running on/with	Platform Versions
Siemens Desigopxm20 E	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.