Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:development/evaluation_kits_for_profinet_io:_dk_standard_ethernet_controller:*:*:*:*:*:*:*:*

part: a version: _dk_standard_ethernet_controller update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductDevelopment/Evaluation Kits For Profinet Io (33593ef0-7231-56a9-8acb-44e24d064503)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28400 vulnerable 2026-06-08 05:23:54.409585 Details available
HIGH (7.5)
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.
Published: 2021-07-13T11:02:49.000Z
Updated: 2026-04-14T08:35:18.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13946 vulnerable 2026-06-08 05:12:52.695735 Details available
HIGH (7.5)
Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.
Published: 2020-02-11T15:36:10.000Z
Updated: 2024-08-05T00:05:44.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10936 vulnerable 2026-06-08 05:12:25.834262 Details available
HIGH (7.5)
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Published: 2019-10-10T00:00:00.000Z
Updated: 2024-08-04T22:40:15.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10923 vulnerable 2026-06-08 05:12:25.548342 Details available
HIGH (7.5)
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
Published: 2019-10-10T13:49:24.000Z
Updated: 2025-02-11T10:26:23.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2681 vulnerable 2026-06-08 05:09:25.267089 Details available
MEDIUM (6.5)
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.
Published: 2017-05-11T10:00:00.000Z
Updated: 2024-09-10T09:33:20.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2680 vulnerable 2026-06-08 05:09:24.966494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12741 vulnerable 2026-06-08 05:08:47.728803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.