Rewterz Threat Advisory – ICS: Siemens KTK, SIDOOR, SIMATIC, and SINAMICS

Severity

Medium

Analysis Summary

CVE-2019-19300

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. 

Impact

• Uncontrolled Resource Consumption
• Denial of service

Affected Vendors

Siemens

Affected Products

• KTK
• SIDOOR
• SIMATIC
• SINAMICS

Remediation

Refer to ICS advisory for the list of affected versions and upgraded patches. 

https://www.us-cert.gov/ics/advisories/icsa-20-105-08