Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-2681

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Published

2017-05-11T10:29:00.180

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

6.5

Impact Score

6.9

Weaknesses

Type: Secondary
CWE-400
Type: Primary
CWE-400

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	siemens	simatic_cp_343-1_std_firmware	< 3.1.3	Yes
Hardware	siemens	simatic_cp_343-1_std	-	No
Operating System	siemens	simatic_cp_343-1_lean_firmware	< 3.1.3	Yes
Hardware	siemens	simatic_cp_343-1_lean	-	No
Operating System	siemens	simatic_cp_343-1_adv_firmware	*	Yes
Hardware	siemens	simatic_cp_343-1_adv	-	No
Operating System	siemens	simatic_cp_443-1_std_firmware	< 3.2.17	Yes
Hardware	siemens	simatic_cp_443-1_std	-	No
Operating System	siemens	simatic_cp_443-1_adv_firmware	< 3.2.17	Yes
Hardware	siemens	simatic_cp_443-1_adv	-	No
Operating System	siemens	simatic_cp_443-1_opc-ua_firmware	*	Yes
Hardware	siemens	simatic_cp_443-1_opc-ua	-	No
Operating System	siemens	simatic_cp_1243-1_firmware	< 2.1.82	Yes
Hardware	siemens	simatic_cp_1243-1	-	No
Operating System	siemens	simatic_cm_1542-1_firmware	< 2.0	Yes
Hardware	siemens	simatic_cm_1542-1	-	No
Operating System	siemens	simatic_cp_1543sp-1_firmware	< 1.0.15	Yes
Hardware	siemens	simatic_cp_1542sp-1	-	No
Operating System	siemens	simatic_cp_1542sp-1_irc_firmware	< 1.0.15	Yes
Hardware	siemens	simatic_cp_1542sp-1_irc	-	No
Operating System	siemens	simatic_cp_1543sp-1_firmware	< 2.1	Yes
Hardware	siemens	simatic_cp_1543sp-1	-	No
Operating System	siemens	simatic_cp_1543-1_firmware	< 1.0.15	Yes
Hardware	siemens	simatic_cp_1543-1	-	No
Operating System	siemens	simatic_rf650r_firmware	< 3.0	Yes
Hardware	siemens	simatic_rf650r	-	No
Operating System	siemens	simatic_rf680r_firmware	< 3.0	Yes
Hardware	siemens	simatic_rf680r	-	No
Operating System	siemens	simatic_rf685r_firmware	< 3.0	Yes
Hardware	siemens	simatic_rf685r	-	No
Operating System	siemens	simatic_cp_1616_firmware	< 2.7	Yes
Hardware	siemens	simatic_cp_1616	-	No
Operating System	siemens	simatic_cp_1604_firmware	< 2.7	Yes
Hardware	siemens	simatic_cp_1604	-	No
Operating System	siemens	simatic_dk-16xx_pn_io_firmware	< 2.7	Yes
Hardware	siemens	simatic_dk-16xx_pn_io	-	No
Operating System	siemens	scalance_x200_firmware	< 5.2.2	Yes
Hardware	siemens	scalance_x200	-	No
Operating System	siemens	scalance_x200_irt_firmware	< 5.4.0	Yes
Hardware	siemens	scalance_x200_irt	-	No
Operating System	siemens	scalance_x300_firmware	< 4.1.0	Yes
Hardware	siemens	scalance_x300	-	No
Operating System	siemens	scalance_x408_firmware	< 4.1.0	Yes
Hardware	siemens	scalance_x408	-	No
Operating System	siemens	scalance_x414_firmware	< 3.10.2	Yes
Hardware	siemens	scalance_x414	-	No
Operating System	siemens	scalance_xm400_firmware	< 6.1	Yes
Hardware	siemens	scalance_xm400	-	No
Operating System	siemens	scalance_xr500_firmware	< 6.1	Yes
Hardware	siemens	scalance_xr500	-	No
Operating System	siemens	scalance_w700_firmware	< 6.1	Yes
Hardware	siemens	scalance_w700	-	No
Operating System	siemens	scalance_m-800_firmware	< 4.03	Yes
Hardware	siemens	scalance_m-800	-	No
Operating System	siemens	scalance_s615_firmware	< 4.03	Yes
Hardware	siemens	scalance_s615	-	No
Operating System	siemens	softnet_profinet_io_firmware	< 14	Yes
Operating System	siemens	softnet_profinet_io_firmware	14	Yes
Hardware	siemens	softnet_profinet_io	-	No
Operating System	siemens	ie\/pb-link_firmware	< 3.0	Yes
Hardware	siemens	ie\/pb-link	-	No
Operating System	siemens	ie\/as-i_link_pn_io_firmware	*	Yes
Hardware	siemens	ie\/as-i_link_pn_io	-	No
Operating System	siemens	simatic_teleservice_adapter_standard_modem_firmware	*	Yes
Hardware	siemens	simatic_teleservice_adapter_standard_modem	-	No
Operating System	siemens	simatic_teleservice_adapter_ie_basic_modem_firmware	*	Yes
Hardware	siemens	simatic_teleservice_adapter_ie_basic_modem	-	No
Operating System	siemens	simatic_teleservice_adapter_ie_advanced_modem_firmware	*	Yes
Hardware	siemens	simatic_teleservice_adapter_ie_advanced_modem	-	No
Operating System	siemens	sitop_psu8600_firmware	< 1.2.0	Yes
Hardware	siemens	sitop_psu8600	-	No
Operating System	siemens	ups1600_profinet_firmware	< 2.2.0	Yes
Hardware	siemens	ups1600_profinet	-	No
Operating System	siemens	simatic_et_200al_firmware	< 1.0.2	Yes
Hardware	siemens	simatic_et_200al	-	No
Operating System	siemens	simatic_et_200ecopn_firmware	*	Yes
Hardware	siemens	simatic_et_200ecopn	-	No
Operating System	siemens	simatic_et_200m_firmware	*	Yes
Hardware	siemens	simatic_et_200m	-	No
Operating System	siemens	simatic_et_200mp_firmware	< 4.0.1	Yes
Hardware	siemens	simatic_et_200mp	-	No
Operating System	siemens	simatic_et_200pro_firmware	*	Yes
Hardware	siemens	simatic_et_200pro	-	No
Operating System	siemens	simatic_et_200s_firmware	*	Yes
Hardware	siemens	simatic_et_200s	-	No
Operating System	siemens	simatic_et_200sp_firmware	< 4.2.0	Yes
Hardware	siemens	simatic_et_200sp	-	No
Operating System	siemens	pn\/pn_coupler_firmware	< 4.0	Yes
Hardware	siemens	pn\/pn_coupler	-	No
Operating System	siemens	dk_standard_ethernet_controller_firmware	< 4.1.1	Yes
Operating System	siemens	dk_standard_ethernet_controller_firmware	4.1.1	Yes
Hardware	siemens	dk_standard_ethernet_controller	-	No
Operating System	siemens	ek-ertec_200p_pn_io_firmware	< 4.4.0	Yes
Operating System	siemens	ek-ertec_200p_pn_io_firmware	4.4.0	Yes
Hardware	siemens	ek-ertec_200p_pn_io	-	No
Operating System	siemens	ek-ertec_200_pn_io_firmware	< 4.2.1	Yes
Operating System	siemens	ek-ertec_200_pn_io_firmware	4.2.1	Yes
Hardware	siemens	ek-ertec_200_pn_io	-	No
Operating System	siemens	simatic_s7-200_smart_firmware	< 2.3	Yes
Hardware	siemens	simatic_s7-200_smart	-	No
Operating System	siemens	simatic_s7-300_firmware	< 3.3.17	Yes
Hardware	siemens	simatic_s7-300	-	No
Operating System	siemens	simatic_s7-400_firmware	< 6.0.6	Yes
Hardware	siemens	simatic_s7-400	-	No
Operating System	siemens	simatic_s7-1200_firmware	< 4.2.1	Yes
Hardware	siemens	simatic_s7-1200	-	No
Operating System	siemens	simatic_s7-1500_firmware	< 2.1	Yes
Hardware	siemens	simatic_s7-1500	-	No
Operating System	siemens	simatic_winac_rtx_firmware	< 2010	Yes
Operating System	siemens	simatic_winac_rtx_firmware	2010	Yes
Hardware	siemens	simatic_winac_rtx	-	No
Operating System	siemens	sirius_act_3su1_firmware	< 1.1.0	Yes
Hardware	siemens	sirius_act_3su1	-	No
Operating System	siemens	sirius_soft_starter_3rw44_pn_firmware	*	Yes
Hardware	siemens	sirius_soft_starter_3rw44_pn	-	No
Operating System	siemens	sirius_motor_starter_m200d_profinet_firmware	*	Yes
Hardware	siemens	sirius_motor_starter_m200d_profinet	-	No
Operating System	siemens	simocode_pro_v_profinet_firmware	< 2.0.0	Yes
Hardware	siemens	simocode_pro_v_profinet	-	No
Operating System	siemens	sinamics_dcm_firmware	< 1.4	Yes
Operating System	siemens	sinamics_dcm_firmware	1.4	Yes
Hardware	siemens	sinamics_dcm	-	No
Operating System	siemens	sinamics_dcp_firmware	< 1.2	Yes
Operating System	siemens	sinamics_dcp_firmware	1.2	Yes
Hardware	siemens	sinamics_dcp	-	No
Operating System	siemens	sinamics_g110m_firmware	< 4.7	Yes
Operating System	siemens	sinamics_g110m_firmware	4.7	Yes
Hardware	siemens	sinamics_g110m	-	No
Operating System	siemens	sinamics_g120\(c\/p\/d\)_pn_firmware	< 4.7	Yes
Hardware	siemens	sinamics_g120\(c\/p\/d\)_pn	-	No
Operating System	siemens	sinamics_g130_firmware	< 4.7	Yes
Operating System	siemens	sinamics_g130_firmware	4.7	Yes
Hardware	siemens	sinamics_g130	-	No
Operating System	siemens	sinamics_g150_firmware	< 4.7	Yes
Operating System	siemens	sinamics_g150_firmware	4.7	Yes
Hardware	siemens	sinamics_g150	-	No
Operating System	siemens	sinamics_s110_pn_firmware	< 4.4	Yes
Operating System	siemens	sinamics_s110_pn_firmware	4.4	Yes
Hardware	siemens	sinamics_s110_pn	-	No
Operating System	siemens	sinamics_s120_firmware	< 4.7	Yes
Operating System	siemens	sinamics_s120_firmware	4.7	Yes
Hardware	siemens	sinamics_s120	-	No
Operating System	siemens	sinamics_s150_firmware	< 4.7	Yes
Operating System	siemens	sinamics_s150_firmware	4.7	Yes
Hardware	siemens	sinamics_s150	-	No
Operating System	siemens	sinamics_v90_pn_firmware	< 1.01	Yes
Hardware	siemens	sinamics_v90_pn	-	No
Operating System	siemens	simotion_firmware	< 4.5	Yes
Operating System	siemens	simotion_firmware	4.5	Yes
Hardware	siemens	simotion	-	No
Operating System	siemens	sinumerik_828d_firmware	< 4.5	Yes
Operating System	siemens	sinumerik_828d_firmware	4.5	Yes
Hardware	siemens	sinumerik_828d	-	No
Operating System	siemens	sinumerik_840d_sl_firmware	< 4.5	Yes
Operating System	siemens	sinumerik_840d_sl_firmware	4.5	Yes
Hardware	siemens	sinumerik_840d_sl	-	No
Operating System	siemens	simatic_hmi_comfort_panels	< 15.1	Yes
Hardware	siemens	simatic_hmi_comfort_panels	-	No
Operating System	siemens	simatic_hmi_multi_panels	< 15.1	Yes
Hardware	siemens	simatic_hmi_multi_panels	-	No
Operating System	siemens	simatic_hmi_mobile_panels	< 15.1	Yes
Hardware	siemens	simatic_hmi_mobile_panels	-	No
Operating System	siemens	simatic_cp_1243-1_irc_firmware	< 2.1.82	Yes
Hardware	siemens	simatic_cp_1243-1_irc	-	No
Operating System	siemens	simatic_cp_1243-1_iec_firmware	*	Yes
Hardware	siemens	simatic_cp_1243-1_iec	-	No
Operating System	siemens	simatic_cp_1243-1_dnp3_firmware	*	Yes
Hardware	siemens	simatic_cp_1243-1_dnp3	-	No
Operating System	siemens	simatic_cm_1542sp-1_firmware	< 1.0.15	Yes
Hardware	siemens	simatic_cm_1542sp-1	-	No
Application	siemens	simatic_s7-1500_software_controller	< 2.1	Yes
Operating System	siemens	sinumerik_828d_firmware	< 4.7	Yes
Operating System	siemens	sinumerik_828d_firmware	4.7	Yes
Hardware	siemens	sinumerik_828d	-	No
Operating System	siemens	sinumerik_840d_sl_firmware	< 4.7	Yes
Operating System	siemens	sinumerik_840d_sl_firmware	4.7	Yes
Hardware	siemens	sinumerik_840d_sl	-	No
Operating System	siemens	simatic_tdc_cpu555_firmware	< 1.1.1	Yes
Hardware	siemens	simatic_tdc_cpu555	-	No
Operating System	siemens	simatic_tdc_cp51m1_firmware	< 1.1.8	Yes
Hardware	siemens	simatic_tdc_cp51m1	-	No

References

http://www.securityfocus.com/bid/98369 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1038463 Third Party Advisory, VDB Entry ([email protected])
https://cert-portal.siemens.com/productcert/html/ssa-293562.html ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf Vendor Advisory ([email protected])
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf Broken Link ([email protected])
http://www.securityfocus.com/bid/98369 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1038463 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/html/ssa-293562.html (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf Broken Link (af854a3a-2127-422b-91ae-364da2661108)