CVE-2019-16671

Published: Dec 6, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption.

Affected (40)

Weidmueller

40 products

Ie Sw Pl09m 5gc 4gt Firmware

Ie Sw Pl09mt 5gc 4gt Firmware

Ie Sw Pl18m 2gc 16tx Firmware

Ie Sw Pl18mt 2gc 16tx Firmware

Ie Sw Pl18m 2gc14tx2sc Firmware

Ie Sw Pl18mt 2gc14tx2sc Firmware

Ie Sw Pl18m 2gc14tx2st Firmware

Ie Sw Pl18mt 2gc14tx2st Firmware

Ie Sw Pl18m 2gc14tx2scs Firmware

Ie Sw Pl18mt 2gc14tx2scs Firmware

Ie Sw Pl16m 16tx Firmware

Ie Sw Pl16mt 16tx Firmware

Ie Sw Pl16m 14tx 2sc Firmware

Ie Sw Pl16mt 14tx 2sc Firmware

Ie Sw Pl16m 14tx 2st Firmware

Ie Sw Pl16mt 14tx 2st Firmware

Ie Sw Vl05m 5tx Firmware

Ie Sw Vl05mt 5tx Firmware

Ie Sw Vl05m 3tx 2sc Firmware

Ie Sw Vl05mt 3tx 2sc Firmware

Ie Sw Vl05m 3tx 2st Firmware

Ie Sw Vl05mt 3tx 2st Firmware

Ie Sw Vl08mt 8tx Firmware

Ie Sw Vl08mt 5tx 3sc Firmware

Ie Sw Vl08mt 5tx 1sc 2scs Firmware

Ie Sw Vl08mt 6tx 2st Firmware

Ie Sw Vl08mt 6tx 2sc Firmware

Ie Sw Vl08mt 6tx 2scs Firmware

Ie Sw Pl08m 8tx Firmware

Ie Sw Pl08mt 8tx Firmware

Ie Sw Pl08m 6tx 2sc Firmware

Ie Sw Pl08mt 6tx 2sc Firmware

Ie Sw Pl08m 6tx 2st Firmware

Ie Sw Pl08mt 6tx 2st Firmware

Ie Sw Pl08m 6tx 2scs Firmware

Ie Sw Pl08mt 6tx 2scs Firmware

Ie Sw Pl10m 3gt 7tx Firmware

Ie Sw Pl10mt 3gt 7tx Firmware

Ie Sw Pl10m 1gt 2gs 7tx Firmware

Ie Sw Pl10mt 1gt 2gs 7tx Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl09m 5gc 4gt Firmware	Up to 3.3.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl09m 5gc 4gt	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl09mt 5gc 4gt Firmware	Up to 3.3.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl09mt 5gc 4gt	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18m 2gc 16tx Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18m 2gc 16tx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18mt 2gc 16tx Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18mt 2gc 16tx	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18m 2gc14tx2sc Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18m 2gc14tx2sc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18mt 2gc14tx2sc Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18mt 2gc14tx2sc	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18m 2gc14tx2st Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18m 2gc14tx2st	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18mt 2gc14tx2st Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18mt 2gc14tx2st	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18m 2gc14tx2scs Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18m 2gc14tx2scs	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl18mt 2gc14tx2scs Firmware	Up to 3.4.4

Running on/with	Platform Versions
Weidmueller Ie Sw Pl18mt 2gc14tx2scs	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl16m 16tx Firmware	Up to 3.4.2

Running on/with	Platform Versions
Weidmueller Ie Sw Pl16m 16tx	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl16mt 16tx Firmware	Up to 3.4.2

Running on/with	Platform Versions
Weidmueller Ie Sw Pl16mt 16tx	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl16m 14tx 2sc Firmware	Up to 3.4.2

Running on/with	Platform Versions
Weidmueller Ie Sw Pl16m 14tx 2sc	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl16mt 14tx 2sc Firmware	Up to 3.4.2

Running on/with	Platform Versions
Weidmueller Ie Sw Pl16mt 14tx 2sc	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl16m 14tx 2st Firmware	Up to 3.4.2

Running on/with	Platform Versions
Weidmueller Ie Sw Pl16m 14tx 2st	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl16mt 14tx 2st Firmware	Up to 3.4.2

Running on/with	Platform Versions
Weidmueller Ie Sw Pl16mt 14tx 2st	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl05m 5tx Firmware	Up to 3.6.6

Running on/with	Platform Versions
Weidmueller Ie Sw Vl05m 5tx	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl05mt 5tx Firmware	Up to 3.6.6

Running on/with	Platform Versions
Weidmueller Ie Sw Vl05mt 5tx	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl05m 3tx 2sc Firmware	Up to 3.6.6

Running on/with	Platform Versions
Weidmueller Ie Sw Vl05m 3tx 2sc	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl05mt 3tx 2sc Firmware	Up to 3.6.6

Running on/with	Platform Versions
Weidmueller Ie Sw Vl05mt 3tx 2sc	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl05m 3tx 2st Firmware	Up to 3.6.6

Running on/with	Platform Versions
Weidmueller Ie Sw Vl05m 3tx 2st	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl05mt 3tx 2st Firmware	Up to 3.6.6

Running on/with	Platform Versions
Weidmueller Ie Sw Vl05mt 3tx 2st	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl08mt 8tx Firmware	Up to 3.5.2

Running on/with	Platform Versions
Weidmueller Ie Sw Vl08mt 8tx	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl08mt 5tx 3sc Firmware	Up to 3.5.2

Running on/with	Platform Versions
Weidmueller Ie Sw Vl08mt 5tx 3sc	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl08mt 5tx 1sc 2scs Firmware	Up to 3.5.2

Running on/with	Platform Versions
Weidmueller Ie Sw Vl08mt 5tx 1sc 2scs	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl08mt 6tx 2st Firmware	Up to 3.5.2

Running on/with	Platform Versions
Weidmueller Ie Sw Vl08mt 6tx 2st	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl08mt 6tx 2sc Firmware	Up to 3.5.2

Running on/with	Platform Versions
Weidmueller Ie Sw Vl08mt 6tx 2sc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Vl08mt 6tx 2scs Firmware	Up to 3.5.2

Running on/with	Platform Versions
Weidmueller Ie Sw Vl08mt 6tx 2scs	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08m 8tx Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08m 8tx	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08mt 8tx Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08mt 8tx	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08m 6tx 2sc Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08m 6tx 2sc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08mt 6tx 2sc Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08mt 6tx 2sc	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08m 6tx 2st Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08m 6tx 2st	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08mt 6tx 2st Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08mt 6tx 2st	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08m 6tx 2scs Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08m 6tx 2scs	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl08mt 6tx 2scs Firmware	Up to 3.3.8

Running on/with	Platform Versions
Weidmueller Ie Sw Pl08mt 6tx 2scs	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl10m 3gt 7tx Firmware	Up to 3.3.16

Running on/with	Platform Versions
Weidmueller Ie Sw Pl10m 3gt 7tx	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl10mt 3gt 7tx Firmware	Up to 3.3.16

Running on/with	Platform Versions
Weidmueller Ie Sw Pl10mt 3gt 7tx	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl10m 1gt 2gs 7tx Firmware	Up to 3.3.16

Running on/with	Platform Versions
Weidmueller Ie Sw Pl10m 1gt 2gs 7tx	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Weidmueller Ie Sw Pl10mt 1gt 2gs 7tx Firmware	Up to 3.3.16

Running on/with	Platform Versions
Weidmueller Ie Sw Pl10mt 1gt 2gs 7tx	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (8)

https://cert.vde.com/en-us/advisories

Source: cve@mitre.org

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2019-018

Source: cve@mitre.org

Third Party Advisory

https://mdcop.weidmueller.com/mediadelivery/asset/900_102694

Source: cve@mitre.org

Vendor Advisory

https://www.us-cert.gov/ics/advisories/icsa-19-339-02

Source: cve@mitre.org

Third Party Advisory

https://cert.vde.com/en-us/advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert.vde.com/en-us/advisories/vde-2019-018

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://mdcop.weidmueller.com/mediadelivery/asset/900_102694

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.us-cert.gov/ics/advisories/icsa-19-339-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.