CVE-2019-10953: high-severity vulnerability in ABB 1SAP120600R0071 PM554-TP-ETH
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Programmable Logic Controllers (PLCs) from major manufacturers can be crashed by flooding them with network packets, causing them to stop working. This affects critical industrial systems and infrastructure that rely on these controllers to operate.
A remote, unauthenticated attacker can trigger a denial-of-service condition by sending a high volume of crafted network packets to vulnerable PLCs (ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO). The attack exploits insufficient input validation or resource exhaustion mechanisms, resulting in service unavailability of industrial control systems.