Lucene search
SiemensCVELIST:CVE-2017-2680HistoryMay 11, 2017 - 1:00 a.m.
CVE-2017-2680
2017-05-1101:00:00
CWE-400
siemens
www.cve.org
6
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS4
7.1
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N
EPSS
0.003
Percentile
67.9%
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
CNA Affected
[
{
"vendor": "Siemens",
"product": "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.1 Patch04"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200",
"versions": [
{
"status": "affected",
"version": "All versions < V4.2.1 Patch03"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P",
"versions": [
{
"status": "affected",
"version": "All versions < V4.4.0 Patch01"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Extension Unit 12\" PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V01.01.01"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Extension Unit 15\" PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V01.01.01"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Extension Unit 19\" PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V01.01.01"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Extension Unit 22\" PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V01.01.01"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "IE/AS-i Link PN IO",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "IE/PB-Link (incl. SIPLUS NET variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.03"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE W-700 IEEE 802.11n family",
"versions": [
{
"status": "affected",
"version": "All versions < V6.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE X-200 family (incl. SIPLUS NET variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V5.2.2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE X-200IRT family (incl. SIPLUS NET variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V5.4.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE X-300 family (incl. X408 and SIPLUS NET variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE X408 family",
"versions": [
{
"status": "affected",
"version": "All versions < V4.1.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE X414",
"versions": [
{
"status": "affected",
"version": "All versions < V3.10.2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE XM-400 family",
"versions": [
{
"status": "affected",
"version": "All versions < V6.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SCALANCE XR-500 family",
"versions": [
{
"status": "affected",
"version": "All versions < V6.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CM 1542-1",
"versions": [
{
"status": "affected",
"version": "All versions < V2.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CM 1542SP-1",
"versions": [
{
"status": "affected",
"version": "All versions < V1.0.15"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1.82"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-1 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1.82"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-7 LTE US",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1.82"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-8 IRC",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1.82"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-8 IRC",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1.82"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V1.0.15"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1543-1 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1543SP-1 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V1.0.15"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1604",
"versions": [
{
"status": "affected",
"version": "All versions < V2.7"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1616",
"versions": [
{
"status": "affected",
"version": "All versions < V2.7"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1626",
"versions": [
{
"status": "affected",
"version": "All versions < V1.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 343-1 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.1.3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 343-1 Lean (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.1.3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 443-1 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.17"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V3.2.17"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 443-1 OPC UA",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC DK-16xx PN IO",
"versions": [
{
"status": "affected",
"version": "All versions < V2.7"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200AL IM 157-1 PN",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.0.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200M (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200MP IM 155-5 PN BA",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.0.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200MP IM 155-5 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200MP IM 155-5 PN ST",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200pro IM 154-3 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200pro IM 154-4 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200SP IM 155-6 PN BA",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200SP IM 155-6 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200SP IM 155-6 PN HS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.0.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200SP IM 155-6 PN ST",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET 200SP IM 155-6 PN ST BA",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 4AO U/I 4xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200ecoPN: IO-Link Master",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC ET200S (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V15.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV420 SR-B",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV420 SR-B Body",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV420 SR-P",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV420 SR-P Body",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV440 HR",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV440 SR",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC MV440 UR",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC RF650R",
"versions": [
{
"status": "affected",
"version": "All versions < V3.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC RF680R",
"versions": [
{
"status": "affected",
"version": "All versions < V3.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC RF685R",
"versions": [
{
"status": "affected",
"version": "All versions < V3.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.2.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-1500 Software Controller",
"versions": [
{
"status": "affected",
"version": "All versions < V2.1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-200 SMART",
"versions": [
{
"status": "affected",
"version": "All versions < V2.3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.X.14",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V6.0.7",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V6.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V7.0.2",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC S7-410 CPU family (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V8.2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC TDC CP51M1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.1.8",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC TDC CPU555",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V1.1.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC Teleservice Adapter IE Advanced",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC Teleservice Adapter IE Basic",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC Teleservice Adapter IE Standard",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC WinAC RTX 2010",
"versions": [
{
"status": "affected",
"version": "All versions < V2010 SP3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC WinAC RTX F 2010",
"versions": [
{
"status": "affected",
"version": "All versions < V2010 SP3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMOCODE pro V PROFINET (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V2.0.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMOTION",
"versions": [
{
"status": "affected",
"version": "All versions < V4.5 HF1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.4 HF26"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS DCM w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V1.4 SP1 HF5"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS DCP w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V1.2 HF1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS G110M w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 SP6 HF3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 SP6 HF3"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS G130 V4.7 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 HF27"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS G130 V4.8 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 HF4"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS G150 V4.7 w. PN",
"versions": [
{
"status": "affected",
"version": "V4.7: All versions < V4.7 HF27"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS G150 V4.8 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 HF4"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS GH150 V4.7 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 SP5 HF7"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS GL150 V4.7 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 SP2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS GM150 V4.7 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 HF31"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S110 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.4 SP3 HF5"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 HF27"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 HF4"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S150 V4.7 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 HF27"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS S150 V4.8 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 HF4"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS SL150 V4.7.0 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 HF30"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS SL150 V4.7.4 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 SP2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS SL150 V4.7.5 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 SP2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS SM120 V4.7 w. PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V4.8 SP2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINAMICS V90 w. PN",
"versions": [
{
"status": "affected",
"version": "All versions < V1.01"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINUMERIK 828D V4.5 and prior",
"versions": [
{
"status": "affected",
"version": "All versions < V4.5 SP6 HF2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINUMERIK 828D V4.7",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 SP4 HF1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINUMERIK 840D sl V4.5 and prior",
"versions": [
{
"status": "affected",
"version": "All versions < V4.5 SP6 HF2"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SINUMERIK 840D sl V4.7",
"versions": [
{
"status": "affected",
"version": "All versions < V4.7 SP4 HF1"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200MP IM 155-5 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200MP IM 155-5 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200MP IM 155-5 PN ST",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200MP IM 155-5 PN ST TX RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN HF",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.2.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN ST",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN ST BA",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP IM 155-6 PN ST TX RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V4.1.0",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIRIUS ACT 3SU1 interface module PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V1.1.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIRIUS Motor Starter M200D PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIRIUS Soft Starter 3RW44 PN",
"versions": [
{
"status": "affected",
"version": "All versions"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SITOP PSU8600 PROFINET",
"versions": [
{
"status": "affected",
"version": "All versions < V1.2.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SITOP UPS1600 PROFINET (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "All versions < V2.2.0"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "Softnet PROFINET IO for PC-based Windows systems",
"versions": [
{
"status": "affected",
"version": "All versions < V14 SP1"
}
],
"defaultStatus": "unknown"
}
]References
www.securityfocus.com/bid/98369
www.securitytracker.com/id/1038463
cert-portal.siemens.com/productcert/html/ssa-284673.html
cert-portal.siemens.com/productcert/html/ssa-293562.html
cert-portal.siemens.com/productcert/html/ssa-546832.html
cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf
cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
ics-cert.us-cert.gov/advisories/ICSA-18-023-02
www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf
Related
vulnrichment
vulnrichment
CVE-2017-2680
2017-05-11 01:00:00
nessus
nessus
Siemens PROFINET DCP Uncontrolled Resource Consumption (CVE-2017-2680)
2022-02-07 00:00:00
Siemens Simatic Improper Input Validation
2019-11-08 00:00:00
cve
cve
CVE-2017-2680
2017-05-11 01:29:05
prion
prion
Design/Logic Flaw
2017-05-11 01:29:00
ics
ics
Siemens Industrial Products (Update A)
2019-02-12 12:00:00
nvd
nvd
CVE-2017-2680
2017-05-11 01:29:05
openvas
openvas
Siemens SIMATIC S7 PLC Multiple Vulnerabilities (SSA-293562)
2017-08-18 00:00:00
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS4
7.1
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:H/SA:N
EPSS
0.003
Percentile
67.9%
Related for CVELIST:CVE-2017-2680