Lucene search
IcscertCVE-2012-3017HistoryJul 31, 2012 - 10:45 a.m.
CVE-2012-3017
2012-07-3110:45:42
CWE-119
icscert
web.nvd.nist.gov
28
siemens
simatic
s7-400
pn cpu
firmware
denial of service
http
ip
vulnerability
cve-2012-3017
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.1
Confidence
Low
EPSS
0.007
Percentile
79.8%
Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.
Affected configurations
Node
siemenssimatic_s7-400_cpu_firmwareMatch5.0
siemenssimatic_s7-400_cpu_414-3_pn\/dp
ORsiemenssimatic_s7-400_cpu_416-3_pn\/dp
ORsiemenssimatic_s7-400_cpu_416f-3_pn\/dp
| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | simatic_s7-400_cpu_firmware | 5.0 | cpe:2.3:o:siemens:simatic_s7-400_cpu_firmware:5.0:*:*:*:*:*:*:* |
| siemens | simatic_s7-400_cpu_414-3_pn\/dp | * | cpe:2.3:h:siemens:simatic_s7-400_cpu_414-3_pn\/dp:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-400_cpu_416-3_pn\/dp | * | cpe:2.3:h:siemens:simatic_s7-400_cpu_416-3_pn\/dp:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-400_cpu_416f-3_pn\/dp | * | cpe:2.3:h:siemens:simatic_s7-400_cpu_416f-3_pn\/dp:*:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2012-07-31 10:45:00
cvelist
cvelist
CVE-2012-3017
2012-07-31 10:00:00
nessus
nessus
nvd
nvd
CVE-2012-3017
2012-07-31 10:45:42
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.1
Confidence
Low
EPSS
0.007
Percentile
79.8%
Related for CVE-2012-3017