{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2019-13942",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2019-13942",
    "idYear": 2019,
    "status": "PUBLISHED",
    "publishedAt": "2019-12-12T19:08:46.000Z",
    "updatedAt": "2024-08-05T00:05:44.006Z",
    "importedAt": "2026-10-24T01:56:08.750Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": null,
      "summary": "A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). An unauthorized user could exploit a buffer overflow vulnerability in the webserver. Specially crafted packets sent could cause a Denial-of-Service condition and if certain conditions are met, the affected devices must be restarted manually to fully recover. At the time of advisory publication no public exploitation of this security vulnerability was known.",
      "affected": [
        {
          "vendor": "Siemens AG",
          "product": "EN100 Ethernet module DNP3 variant",
          "versions": [
            {
              "version": "All versions",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Siemens AG",
          "product": "EN100 Ethernet module IEC 61850 variant",
          "versions": [
            {
              "version": "All versions < V4.37",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Siemens AG",
          "product": "EN100 Ethernet module IEC104 variant",
          "versions": [
            {
              "version": "All versions",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Siemens AG",
          "product": "EN100 Ethernet module Modbus TCP variant",
          "versions": [
            {
              "version": "All versions",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Siemens AG",
          "product": "EN100 Ethernet module PROFINET IO variant",
          "versions": [
            {
              "version": "All versions",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}