6.5

CVE-2017-2681

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Simatic Cp 343-1 Std Firmware Version < 3.1.3
   Siemens ≫ Simatic Cp 343-1 Std Version -
Siemens ≫ Simatic Cp 343-1 Lean Firmware Version < 3.1.3
   Siemens ≫ Simatic Cp 343-1 Lean Version -
Siemens ≫ Simatic Cp 443-1 Std Firmware Version < 3.2.17
   Siemens ≫ Simatic Cp 443-1 Std Version -
Siemens ≫ Simatic Cp 443-1 Adv Firmware Version < 3.2.17
   Siemens ≫ Simatic Cp 443-1 Adv Version -
Siemens ≫ Simatic Cp 1243-1 Firmware Version < 2.1.82
   Siemens ≫ Simatic Cp 1243-1 Version -
Siemens ≫ Simatic Cm 1542-1 Firmware Version < 2.0
   Siemens ≫ Simatic Cm 1542-1 Version -
Siemens ≫ Simatic Cp 1543sp-1 Firmware Version < 1.0.15
   Siemens ≫ Simatic Cp 1542sp-1 Version -
Siemens ≫ Simatic Cp 1543sp-1 Firmware Version < 2.1
   Siemens ≫ Simatic Cp 1543sp-1 Version -
Siemens ≫ Simatic Cp 1543-1 Firmware Version < 1.0.15
   Siemens ≫ Simatic Cp 1543-1 Version -
Siemens ≫ Simatic Rf650r Firmware Version < 3.0
   Siemens ≫ Simatic Rf650r Version -
Siemens ≫ Simatic Rf680r Firmware Version < 3.0
   Siemens ≫ Simatic Rf680r Version -
Siemens ≫ Simatic Rf685r Firmware Version < 3.0
   Siemens ≫ Simatic Rf685r Version -
Siemens ≫ Simatic Cp 1616 Firmware Version < 2.7
   Siemens ≫ Simatic Cp 1616 Version -
Siemens ≫ Simatic Cp 1604 Firmware Version < 2.7
   Siemens ≫ Simatic Cp 1604 Version -
Siemens ≫ Scalance X200 Firmware Version < 5.2.2
   Siemens ≫ Scalance X200 Version -
Siemens ≫ Scalance X200 Irt Firmware Version < 5.4.0
   Siemens ≫ Scalance X200 Irt Version -
Siemens ≫ Scalance X300 Firmware Version < 4.1.0
   Siemens ≫ Scalance X300 Version -
Siemens ≫ Scalance X408 Firmware Version < 4.1.0
   Siemens ≫ Scalance X408 Version -
Siemens ≫ Scalance X414 Firmware Version < 3.10.2
   Siemens ≫ Scalance X414 Version -
Siemens ≫ Scalance Xm400 Firmware Version < 6.1
   Siemens ≫ Scalance Xm400 Version -
Siemens ≫ Scalance Xr500 Firmware Version < 6.1
   Siemens ≫ Scalance Xr500 Version -
Siemens ≫ Scalance W700 Firmware Version < 6.1
   Siemens ≫ Scalance W700 Version -
Siemens ≫ Scalance M-800 Firmware Version < 4.03
   Siemens ≫ Scalance M-800 Version -
Siemens ≫ Scalance S615 Firmware Version < 4.03
   Siemens ≫ Scalance S615 Version -
Siemens ≫ Softnet Profinet Io Firmware Version < 14
   Siemens ≫ Softnet Profinet Io Version -
Siemens ≫ Softnet Profinet Io Firmware Version 14 Update -
   Siemens ≫ Softnet Profinet Io Version -
Siemens ≫ Sitop Psu8600 Firmware Version < 1.2.0
   Siemens ≫ Sitop Psu8600 Version -
Siemens ≫ Ups1600 Profinet Firmware Version < 2.2.0
   Siemens ≫ Ups1600 Profinet Version -
Siemens ≫ Simatic Et 200al Firmware Version < 1.0.2
   Siemens ≫ Simatic Et 200al Version -
Siemens ≫ Simatic Et 200mp Firmware Version < 4.0.1
   Siemens ≫ Simatic Et 200mp Version -
Siemens ≫ Simatic Et 200sp Firmware Version < 4.2.0
   Siemens ≫ Simatic Et 200sp Version -
Siemens ≫ Ek-ertec 200p Pn Io Firmware Version < 4.4.0
   Siemens ≫ Ek-ertec 200p Pn Io Version -
Siemens ≫ Ek-ertec 200p Pn Io Firmware Version 4.4.0 Update -
   Siemens ≫ Ek-ertec 200p Pn Io Version -
Siemens ≫ Ek-ertec 200 Pn Io Firmware Version < 4.2.1
   Siemens ≫ Ek-ertec 200 Pn Io Version -
Siemens ≫ Ek-ertec 200 Pn Io Firmware Version 4.2.1 Update -
   Siemens ≫ Ek-ertec 200 Pn Io Version -
Siemens ≫ Simatic S7-200 Smart Firmware Version < 2.3
   Siemens ≫ Simatic S7-200 Smart Version -
Siemens ≫ Simatic S7-300 Firmware Version < 3.3.17
   Siemens ≫ Simatic S7-300 Version -
Siemens ≫ Simatic S7-400 Firmware Version < 6.0.6
   Siemens ≫ Simatic S7-400 Version -
Siemens ≫ Simatic S7-1200 Firmware Version < 4.2.1
   Siemens ≫ Simatic S7-1200 Version -
Siemens ≫ Simatic S7-1500 Firmware Version < 2.1
   Siemens ≫ Simatic S7-1500 Version -
Siemens ≫ Simatic Winac Rtx Firmware Version < 2010
   Siemens ≫ Simatic Winac Rtx Version -
Siemens ≫ Simatic Winac Rtx Firmware Version 2010 Update -
   Siemens ≫ Simatic Winac Rtx Version -
Siemens ≫ Sirius Act 3su1 Firmware Version < 1.1.0
   Siemens ≫ Sirius Act 3su1 Version -
Siemens ≫ Sinamics Dcm Firmware Version < 1.4
   Siemens ≫ Sinamics Dcm Version -
Siemens ≫ Sinamics Dcm Firmware Version 1.4 Update -
   Siemens ≫ Sinamics Dcm Version -
Siemens ≫ Sinamics Dcp Firmware Version < 1.2
   Siemens ≫ Sinamics Dcp Version -
Siemens ≫ Sinamics Dcp Firmware Version 1.2 Update -
   Siemens ≫ Sinamics Dcp Version -
Siemens ≫ Sinamics G110m Firmware Version < 4.7
   Siemens ≫ Sinamics G110m Version -
Siemens ≫ Sinamics G110m Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G110m Version -
Siemens ≫ Sinamics G130 Firmware Version < 4.7
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G130 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G130 Version -
Siemens ≫ Sinamics G150 Firmware Version < 4.7
   Siemens ≫ Sinamics G150 Version -
Siemens ≫ Sinamics G150 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics G150 Version -
Siemens ≫ Sinamics S110 Pn Firmware Version < 4.4
   Siemens ≫ Sinamics S110 Pn Version -
Siemens ≫ Sinamics S110 Pn Firmware Version 4.4 Update -
   Siemens ≫ Sinamics S110 Pn Version -
Siemens ≫ Sinamics S120 Firmware Version < 4.7
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S120 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics S120 Version -
Siemens ≫ Sinamics S150 Firmware Version < 4.7
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics S150 Firmware Version 4.7 Update -
   Siemens ≫ Sinamics S150 Version -
Siemens ≫ Sinamics V90 Pn Firmware Version < 1.01
   Siemens ≫ Sinamics V90 Pn Version -
Siemens ≫ Simotion Firmware Version < 4.5
   Siemens ≫ Simotion Version -
Siemens ≫ Simotion Firmware Version 4.5 Update -
   Siemens ≫ Simotion Version -
Siemens ≫ Sinumerik 828d Firmware Version < 4.5
   Siemens ≫ Sinumerik 828d Version -
Siemens ≫ Sinumerik 828d Firmware Version 4.5 Update -
   Siemens ≫ Sinumerik 828d Version -
Siemens ≫ Sinumerik 840d Sl Firmware Version < 4.5
   Siemens ≫ Sinumerik 840d Sl Version -
Siemens ≫ Sinumerik 840d Sl Firmware Version 4.5 Update -
   Siemens ≫ Sinumerik 840d Sl Version -
Siemens ≫ Simatic Hmi Multi Panels Version < 15.1
   Siemens ≫ Simatic Hmi Multi Panels Version -
Siemens ≫ Simatic Hmi Mobile Panels Version < 15.1
   Siemens ≫ Simatic Hmi Mobile Panels Version -
Siemens ≫ Simatic Cp 1243-1 Irc Firmware Version < 2.1.82
   Siemens ≫ Simatic Cp 1243-1 Irc Version -
Siemens ≫ Simatic Cm 1542sp-1 Firmware Version < 1.0.15
   Siemens ≫ Simatic Cm 1542sp-1 Version -
Siemens ≫ Sinumerik 828d Firmware Version < 4.7
   Siemens ≫ Sinumerik 828d Version -
Siemens ≫ Sinumerik 828d Firmware Version 4.7 Update -
   Siemens ≫ Sinumerik 828d Version -
Siemens ≫ Sinumerik 840d Sl Firmware Version < 4.7
   Siemens ≫ Sinumerik 840d Sl Version -
Siemens ≫ Sinumerik 840d Sl Firmware Version 4.7 Update -
   Siemens ≫ Sinumerik 840d Sl Version -
Siemens ≫ Simatic Tdc Cpu555 Firmware Version < 1.1.1
   Siemens ≫ Simatic Tdc Cpu555 Version -
Siemens ≫ Simatic Tdc Cp51m1 Firmware Version < 1.1.8
   Siemens ≫ Simatic Tdc Cp51m1 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.91% 0.551
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
Siemens 7.1 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Siemens 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://www.securityfocus.com/bid/98369
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038463
Third Party Advisory
VDB Entry
https://cert-portal.siemens.com/productcert/html/ssa-293562.html
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
Vendor Advisory
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf
Broken Link