CVE-2017-2681

A vulnerability has been identified in SIMATIC CP 343-1 Std (All versions), SIMATIC CP 343-1 Lean (All versions), SIMATIC CP 343-1 Adv (All versions), SIMATIC CP 443-1 Std (All versions < V3.2.17), SIMATIC CP 443-1 Adv (All versions < V3.2.17), SIMATIC CP 443-1 OPC-UA (All versions), SIMATIC CP 1243-1 (All versions < V2.1.82), SIMATIC CP 1243-1 IRC (All versions < V2.1.82), SIMATIC CP 1243-1 IEC (All versions), SIMATIC CP 1243-1 DNP3 (All versions), SIMATIC CM 1542-1 (All versions < V2.0), SIMATIC CM 1542SP-1 (All versions < V1.0.15), SIMATIC CP 1542SP-1 IRC (All versions < V1.0.15), SIMATIC CP 1543SP-1 (All versions < V1.0.15), SIMATIC CP 1543-1 (All versions < V2.1), SIMATIC RF650R (All versions < V3.0), SIMATIC RF680R (All versions < V3.0), SIMATIC RF685R (All versions < V3.0), SIMATIC CP 1616 (All versions < V2.7), SIMATIC CP 1604 (All versions < V2.7), SIMATIC DK-16xx PN IO (All versions < V2.7), SCALANCE X-200 (All versions < V5.2.2), SCALANCE X-200 IRT (All versions), SCALANCE X-300/X408 (All versions < V4.1.0), SCALANCE X414 (All versions < V3.10.2), SCALANCE XM400 (All versions < V6.1), SCALANCE XR500 (All versions < V6.1), SCALANCE W700 (All versions < V6.1), SCALANCE M-800, S615 (All versions < V4.03), Softnet PROFINET IO for PC-based Windows systems (All versions < V14 SP1), IE/PB-Link (All versions < V3.0), IE/AS-i Link PN IO (All versions), SIMATIC Teleservice Adapter Standard Modem, IE Basic, IE Advanced (All versions), SITOP PSU8600 PROFINET (All versions < V1.2.0), SITOP UPS1600 PROFINET (All versions < V2.2.0), SIMATIC ET 200AL (All versions < V1.0.2), SIMATIC ET 200ecoPN (All versions), SIMATIC ET 200M (All versions), SIMATIC ET 200MP IM155-5 PN BA (All versions < V4.0.1), SIMATIC ET 200MP IM155-5 PN ST (All versions < V4.1), SIMATIC ET 200MP (except IM155-5 PN BA and IM155-5 PN ST) (All versions), SIMATIC ET 200pro (All versions), SIMATIC ET 200S (All versions), SIMATIC ET 200SP IM155-6 PN ST (All versions < V4.1.0), SIMATIC ET 200SP (except IM155-6 PN ST) (All versions), SIMATIC PN/PN Coupler (All versions < V4.0), Development/Evaluation Kit DK Standard Ethernet Controller (All versions < V4.1.1 Patch04), Development/Evaluation Kit EK-ERTEC 200P (All versions < V4.4.0 Patch01), Development/Evaluation Kit EK-ERTEC 200 (All versions < V4.2.1 Patch03), SIMATIC S7-200 SMART (All versions < V2.3), SIMATIC S7-300 incl. F and T (All versions < V3.X.14), SIMATIC S7-400 PN/DP V6 Incl. F (All versions < V6.0.6), SIMATIC S7-400-H V6 (All versions < V6.0.7), SIMATIC S7-400 PN/DP V7 Incl. F (All versions < V7.0.2), SIMATIC S7-410 (All versions < V8.2), SIMATIC S7-1200 incl. F (All versions < V4.2.1), SIMATIC S7-1500 incl. F, T, and TF (All versions < V2.1), SIMATIC S7-1500 Software Controller incl. F (All versions < V2.1), SIMATIC WinAC RTX 2010 incl. F (All versions), SIRIUS ACT 3SU1 interface module PROFINET (All versions), SIRIUS Soft Starter 3RW44 PN (All versions), SIRIUS Motor Starter M200D PROFINET (All versions), SIMOCODE pro V PROFINET (All versions < V2.0.0), SINAMICS DCM w. PN (All versions < V1.4 SP1 HF5), SINAMICS DCP w. PN (All versions < V1.2 HF 1), SINAMICS G110M w. PN (All versions < V4.7 SP6 HF3), SINAMICS G120(C/P/D) w. PN (All versions < V4.7 SP6 HF3), SINAMICS G130 V4.7 w. PN (All versions < V4.7 HF27), SINAMICS G150 V4.7 w. PN (V4.7: All versions < V4.7 HF27), SINAMICS G130 V4.8 w. PN (All versions < V4.8 HF4), SINAMICS G150 V4.8 w. PN (All versions < V4.8 HF4), SINAMICS S110 w. PN (All versions < V4.4 SP3 HF5), SINAMICS S120 V4.7 w. PN (All versions < V4.7 HF27), and others. Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a Denial-of-Service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.

Published : 2017-05-11 10:29 Updated : 2018-03-01 02:29

6.1
CVSS Score More info
Score 6.1 / 10
6.1
Vendor Product Version URI
Siemens Simatic Cp 443-1 Adv Firmware - cpe:/o:siemens:simatic_cp_443-1_adv_firmware:-
Siemens Sinumerik 828d Firmware 4.7 cpe:/o:siemens:sinumerik_828d_firmware:4.7
Siemens Simatic Et 200mp Firmware - cpe:/o:siemens:simatic_et_200mp_firmware:-
Siemens Scalance X200 Irt Firmware - cpe:/o:siemens:scalance_x200_irt_firmware:-
Siemens Ie%2fpb-link Firmware - cpe:/o:siemens:ie%2fpb-link_firmware:-
Siemens Simatic Cm 1542-1 Firmware - cpe:/o:siemens:simatic_cm_1542-1_firmware:-
Siemens Simatic Et 200sp Firmware - cpe:/o:siemens:simatic_et_200sp_firmware:-
Siemens Sinamics Dcm Firmware - cpe:/o:siemens:sinamics_dcm_firmware:-
Siemens Simatic Cp 1543sp-1 Firmware - cpe:/o:siemens:simatic_cp_1543sp-1_firmware:-
Siemens Simocode Pro V Profinet Firmware - cpe:/o:siemens:simocode_pro_v_profinet_firmware:-
Siemens Sinumerik 828d Firmware 4.5 cpe:/o:siemens:sinumerik_828d_firmware:4.5
Siemens Simatic Cp 443-1 Opc-ua Firmware - cpe:/o:siemens:simatic_cp_443-1_opc-ua_firmware:-
Siemens Ups1600 Profinet Firmware - cpe:/o:siemens:ups1600_profinet_firmware:-
Siemens Ek-ertec 200 Pn Io Firmware 4.2.1 cpe:/o:siemens:ek-ertec_200_pn_io_firmware:4.2.1
Siemens Simatic Et 200s Firmware - cpe:/o:siemens:simatic_et_200s_firmware:-
Siemens Simatic S7-1500 Firmware - cpe:/o:siemens:simatic_s7-1500_firmware:-
Siemens Simatic Hmi Mobile Panels - cpe:/o:siemens:simatic_hmi_mobile_panels:-
Siemens Simatic Teleservice Adapter Standard Modem Firmware - cpe:/o:siemens:simatic_teleservice_adapter_standard_modem_firmware:-
Siemens Simatic Rf685r Firmware - cpe:/o:siemens:simatic_rf685r_firmware:-
Siemens Simatic Et 200m Firmware - cpe:/o:siemens:simatic_et_200m_firmware:-
Siemens Simatic S7-400 Firmware - cpe:/o:siemens:simatic_s7-400_firmware:-
Siemens Pn%2fpn Coupler Firmware - cpe:/o:siemens:pn%2fpn_coupler_firmware:-
Siemens Simatic Cp 1243-1 Firmware - cpe:/o:siemens:simatic_cp_1243-1_firmware:-
Siemens Simatic Rf650r Firmware - cpe:/o:siemens:simatic_rf650r_firmware:-
Siemens Simotion Firmware 4.5 cpe:/o:siemens:simotion_firmware:4.5
Siemens Scalance Xm400 Firmware - cpe:/o:siemens:scalance_xm400_firmware:-
Siemens Sinamics G110m Firmware 4.7 cpe:/o:siemens:sinamics_g110m_firmware:4.7
Siemens Simatic S7-300 Firmware - cpe:/o:siemens:simatic_s7-300_firmware:-
Siemens Scalance S615 Firmware - cpe:/o:siemens:scalance_s615_firmware:-
Siemens Simatic Cp 343-1 Lean Firmware - cpe:/o:siemens:simatic_cp_343-1_lean_firmware:-
Siemens Scalance X414 Firmware - cpe:/o:siemens:scalance_x414_firmware:-
Siemens Simatic Winac Rtx 2010 Firmware - cpe:/o:siemens:simatic_winac_rtx_2010_firmware:-
Siemens Sirius Act 3su1 Firmware - cpe:/o:siemens:sirius_act_3su1_firmware:-
Siemens Scalance X300 Firmware - cpe:/o:siemens:scalance_x300_firmware:-
Siemens Scalance X408 Firmware - cpe:/o:siemens:scalance_x408_firmware:-
Siemens Sinumerik 840d Sl Firmware 4.7 cpe:/o:siemens:sinumerik_840d_sl_firmware:4.7
Siemens Simatic Cp 343-1 Std Firmware - cpe:/o:siemens:simatic_cp_343-1_std_firmware:-
Siemens Sinumerik 840d Sl Firmware 4.5 cpe:/o:siemens:sinumerik_840d_sl_firmware:4.5
Siemens Simatic Cp 443-1 Std Firmware - cpe:/o:siemens:simatic_cp_443-1_std_firmware:-
Siemens Simatic S7-1500 Software Controller Firmware - cpe:/o:siemens:simatic_s7-1500_software_controller_firmware:-
Siemens Simatic Rf680r Firmware - cpe:/o:siemens:simatic_rf680r_firmware:-
Siemens Scalance Xr500 Firmware - cpe:/o:siemens:scalance_xr500_firmware:-
Siemens Sirius Soft Starter 3rw44 Pn Firmware - cpe:/o:siemens:sirius_soft_starter_3rw44_pn_firmware:-
Siemens Simatic Cp 1604 Firmware - cpe:/o:siemens:simatic_cp_1604_firmware:-
Siemens Simatic Hmi Multi Panels - cpe:/o:siemens:simatic_hmi_multi_panels:-
Siemens Softnet Profinet Io Firmware - cpe:/o:siemens:softnet_profinet_io_firmware:-
Siemens Sinamics Dcp Firmware - cpe:/o:siemens:sinamics_dcp_firmware:-
Siemens Sitop Psu8600 Firmware - cpe:/o:siemens:sitop_psu8600_firmware:-
Siemens Simatic S7-200 Smart Firmware - cpe:/o:siemens:simatic_s7-200_smart_firmware:-
Siemens Sinamics G130 Firmware 4.8 cpe:/o:siemens:sinamics_g130_firmware:4.8
Siemens Simatic Teleservice Adapter Ie Basic Modem Firmware - cpe:/o:siemens:simatic_teleservice_adapter_ie_basic_modem_firmware:-
Siemens Simatic Cp 1616 Firmware - cpe:/o:siemens:simatic_cp_1616_firmware:-
Siemens Simatic Dk-16xx Pn Io Firmware - cpe:/o:siemens:simatic_dk-16xx_pn_io_firmware:-
Siemens Simatic S7-1200 Firmware - cpe:/o:siemens:simatic_s7-1200_firmware:-
Siemens Simatic Cp 343-1 Adv Firmware - cpe:/o:siemens:simatic_cp_343-1_adv_firmware:-
Siemens Simatic Cp 1542sp-1 Irc Firmware - cpe:/o:siemens:simatic_cp_1542sp-1_irc_firmware:-
Siemens Simatic Et 200pro Firmware - cpe:/o:siemens:simatic_et_200pro_firmware:-
Siemens Simatic Cp 1542sp-1 Firmware - cpe:/o:siemens:simatic_cp_1542sp-1_firmware:-
Siemens Dk Standard Ethernet Controller Firmware 4.1.1 cpe:/o:siemens:dk_standard_ethernet_controller_firmware:4.1.1
Siemens Sinamics S120 Firmware 4.8 cpe:/o:siemens:sinamics_s120_firmware:4.8
Siemens Scalance X200 Firmware - cpe:/o:siemens:scalance_x200_firmware:-
Siemens Ie%2fas-i Link Pn Io Firmware - cpe:/o:siemens:ie%2fas-i_link_pn_io_firmware:-
Siemens Scalance M-800 Firmware - cpe:/o:siemens:scalance_m-800_firmware:-
Siemens Sinamics G120%28c%2fp%2fd%29 W. Pn Firmware 4.7 cpe:/o:siemens:sinamics_g120%28c%2fp%2fd%29_w._pn_firmware:4.7
Siemens Sinamics V90 W. Pn Firmware - cpe:/o:siemens:sinamics_v90_w._pn_firmware:-
Siemens Simatic Et 200al Firmware - cpe:/o:siemens:simatic_et_200al_firmware:-
Siemens Sirius Motor Starter M200d Profinet Firmware - cpe:/o:siemens:sirius_motor_starter_m200d_profinet_firmware:-
Siemens Simatic Hmi Comfort Panels - cpe:/o:siemens:simatic_hmi_comfort_panels:-
Siemens Scalance W700 Firmware - cpe:/o:siemens:scalance_w700_firmware:-
Siemens Simatic Teleservice Adapter Ie Advanced Modem Firmware - cpe:/o:siemens:simatic_teleservice_adapter_ie_advanced_modem_firmware:-
Siemens Sinamics S150 Firmware 4.8 cpe:/o:siemens:sinamics_s150_firmware:4.8
Siemens Simatic Cp 1543-1 Firmware - cpe:/o:siemens:simatic_cp_1543-1_firmware:-
Siemens Ek-ertec 200p Pn Io Firmware 4.4.0 cpe:/o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0
Siemens Sinamics S110 W. Pn Firmware - cpe:/o:siemens:sinamics__s110_w._pn_firmware:-
Siemens Simatic Et 200ecopn Firmware - cpe:/o:siemens:simatic_et_200ecopn_firmware:-
Siemens Sinamics G150 Firmware 4.8 cpe:/o:siemens:sinamics_g150_firmware:4.8
  1. Siemens (74) Search CVE
    1. Scalance Xm400 Firmware (1) Search CVE
      1. -
    2. Simatic Teleservice Adapter Standard Modem Firmware (1) Search CVE
      1. -
    3. Scalance Xr500 Firmware (1) Search CVE
      1. -
    4. Sinamics Dcm Firmware (1) Search CVE
      1. -
    5. Softnet Profinet Io Firmware (1) Search CVE
      1. -
    6. Simatic S7-1500 Software Controller Firmware (1) Search CVE
      1. -
    7. Simatic Teleservice Adapter Ie Basic Modem Firmware (1) Search CVE
      1. -
    8. Ups1600 Profinet Firmware (1) Search CVE
      1. -
    9. Simatic Et 200s Firmware (1) Search CVE
      1. -
    10. Simatic Rf650r Firmware (1) Search CVE
      1. -
    11. Simatic Et 200sp Firmware (1) Search CVE
      1. -
    12. Sirius Motor Starter M200d Profinet Firmware (1) Search CVE
      1. -
    13. Simatic S7-200 Smart Firmware (1) Search CVE
      1. -
    14. Dk Standard Ethernet Controller Firmware (1) Search CVE
      1. 4.1.1
    15. Simatic Cp 343-1 Std Firmware (1) Search CVE
      1. -
    16. Simatic Cp 1542sp-1 Irc Firmware (1) Search CVE
      1. -
    17. Simatic Cp 1604 Firmware (1) Search CVE
      1. -
    18. Simatic S7-1200 Firmware (1) Search CVE
      1. -
    19. Simotion Firmware (1) Search CVE
      1. 4.5
    20. Sinamics S120 Firmware (1) Search CVE
      1. 4.8
    21. Simatic Hmi Multi Panels (1) Search CVE
      1. -
    22. Simatic Et 200mp Firmware (1) Search CVE
      1. -
    23. Sinamics G130 Firmware (1) Search CVE
      1. 4.8
    24. Simatic Cp 1616 Firmware (1) Search CVE
      1. -
    25. Simatic Hmi Mobile Panels (1) Search CVE
      1. -
    26. Sinamics G110m Firmware (1) Search CVE
      1. 4.7
    27. Scalance X300 Firmware (1) Search CVE
      1. -
    28. Simatic S7-1500 Firmware (1) Search CVE
      1. -
    29. Sinamics Dcp Firmware (1) Search CVE
      1. -
    30. Simatic Cp 1243-1 Firmware (1) Search CVE
      1. -
    31. Simatic Teleservice Adapter Ie Advanced Modem Firmware (1) Search CVE
      1. -
    32. Simatic Cp 343-1 Adv Firmware (1) Search CVE
      1. -
    33. Scalance W700 Firmware (1) Search CVE
      1. -
    34. Sinamics G120%28c%2fp%2fd%29 W. Pn Firmware (1) Search CVE
      1. 4.7
    35. Simatic Cp 1543sp-1 Firmware (1) Search CVE
      1. -
    36. Simatic Cp 343-1 Lean Firmware (1) Search CVE
      1. -
    37. Ie%2fpb-link Firmware (1) Search CVE
      1. -
    38. Scalance X414 Firmware (1) Search CVE
      1. -
    39. Sinumerik 840d Sl Firmware (2) Search CVE
      1. 4.7
      2. 4.5
    40. Sinamics S110 W. Pn Firmware (1) Search CVE
      1. -
    41. Sinumerik 828d Firmware (2) Search CVE
      1. 4.7
      2. 4.5
    42. Simatic Et 200m Firmware (1) Search CVE
      1. -
    43. Simatic S7-400 Firmware (1) Search CVE
      1. -
    44. Simatic Cp 1542sp-1 Firmware (1) Search CVE
      1. -
    45. Simatic Et 200ecopn Firmware (1) Search CVE
      1. -
    46. Simatic S7-300 Firmware (1) Search CVE
      1. -
    47. Scalance S615 Firmware (1) Search CVE
      1. -
    48. Sinamics G150 Firmware (1) Search CVE
      1. 4.8
    49. Simatic Winac Rtx 2010 Firmware (1) Search CVE
      1. -
    50. Simatic Rf685r Firmware (1) Search CVE
      1. -
    51. Scalance X200 Firmware (1) Search CVE
      1. -
    52. Simatic Cm 1542-1 Firmware (1) Search CVE
      1. -
    53. Sitop Psu8600 Firmware (1) Search CVE
      1. -
    54. Simatic Cp 443-1 Opc-ua Firmware (1) Search CVE
      1. -
    55. Simocode Pro V Profinet Firmware (1) Search CVE
      1. -
    56. Simatic Et 200pro Firmware (1) Search CVE
      1. -
    57. Pn%2fpn Coupler Firmware (1) Search CVE
      1. -
    58. Simatic Et 200al Firmware (1) Search CVE
      1. -
    59. Sinamics S150 Firmware (1) Search CVE
      1. 4.8
    60. Simatic Dk-16xx Pn Io Firmware (1) Search CVE
      1. -
    61. Ek-ertec 200p Pn Io Firmware (1) Search CVE
      1. 4.4.0
    62. Simatic Cp 1543-1 Firmware (1) Search CVE
      1. -
    63. Ie%2fas-i Link Pn Io Firmware (1) Search CVE
      1. -
    64. Simatic Rf680r Firmware (1) Search CVE
      1. -
    65. Scalance X200 Irt Firmware (1) Search CVE
      1. -
    66. Sinamics V90 W. Pn Firmware (1) Search CVE
      1. -
    67. Simatic Hmi Comfort Panels (1) Search CVE
      1. -
    68. Simatic Cp 443-1 Adv Firmware (1) Search CVE
      1. -
    69. Simatic Cp 443-1 Std Firmware (1) Search CVE
      1. -
    70. Ek-ertec 200 Pn Io Firmware (1) Search CVE
      1. 4.2.1
    71. Sirius Act 3su1 Firmware (1) Search CVE
      1. -
    72. Scalance M-800 Firmware (1) Search CVE
      1. -
    73. Sirius Soft Starter 3rw44 Pn Firmware (1) Search CVE
      1. -
    74. Scalance X408 Firmware (1) Search CVE
      1. -

CWE

ID Name Description Links
CWE-20 Improper Input Validation The product does not validate or incorrectly validates input that can affect the control flow or data flow of a program. CVE

History of changes

Date Event
2018-03-01 02:29
2018-02-24 02:29
2018-01-25 02:29
2018-01-19 02:29
2017-12-30 02:29
2017-07-08 05:31
2017-06-17 05:27
2017-05-11 10:29

New CVE