CVE-2017-2681

2017-05-1110:00:00
CWE-400
siemens
www.cve.org
0.001 Low
EPSS
Percentile
49.1%
JSON
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. This vulnerability affects only SIMATIC HMI Multi Panels and HMI Mobile Panels, and S7-300/S7-400 devices.
CNA Affected

[
  {
    "product": "Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.1 Patch04"
      }
    ]
  },
  {
    "product": "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.2.1 Patch03"
      }
    ]
  },
  {
    "product": "Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.4.0 Patch01"
      }
    ]
  },
  {
    "product": "IE/AS-i Link PN IO",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "IE/PB-Link (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0"
      }
    ]
  },
  {
    "product": "SCALANCE M-800 / S615",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.03"
      }
    ]
  },
  {
    "product": "SCALANCE W700",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.1"
      }
    ]
  },
  {
    "product": "SCALANCE X-200 switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.2.2"
      }
    ]
  },
  {
    "product": "SCALANCE X-200IRT switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.4.0"
      }
    ]
  },
  {
    "product": "SCALANCE X-300 switch family (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.0"
      }
    ]
  },
  {
    "product": "SCALANCE X408",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.0"
      }
    ]
  },
  {
    "product": "SCALANCE X414",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.10.2"
      }
    ]
  },
  {
    "product": "SCALANCE XM-400 Family",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.1"
      }
    ]
  },
  {
    "product": "SCALANCE XR-500 Family",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.1"
      }
    ]
  },
  {
    "product": "SIMATIC CM 1542-1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.0"
      }
    ]
  },
  {
    "product": "SIMATIC CM 1542SP-1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.0.15"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1243-1 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1.82"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1243-1 IRC (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1.82"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.0.15"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1543-1 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1543SP-1 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.0.15"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1604",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.7"
      }
    ]
  },
  {
    "product": "SIMATIC CP 1616",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.7"
      }
    ]
  },
  {
    "product": "SIMATIC CP 343-1 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.1.3"
      }
    ]
  },
  {
    "product": "SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC CP 343-1 Lean (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.1.3"
      }
    ]
  },
  {
    "product": "SIMATIC CP 443-1 (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.2.17"
      }
    ]
  },
  {
    "product": "SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.2.17"
      }
    ]
  },
  {
    "product": "SIMATIC CP 443-1 OPC UA",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC DK-16xx PN IO",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.7"
      }
    ]
  },
  {
    "product": "SIMATIC ET200AL",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.0.2"
      }
    ]
  },
  {
    "product": "SIMATIC ET200M (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0.1"
      }
    ]
  },
  {
    "product": "SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.2"
      }
    ]
  },
  {
    "product": "SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1"
      }
    ]
  },
  {
    "product": "SIMATIC ET200S (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200SP (incl. SIPLUS variants, except IM155-6 PN ST and IM155-6 PN HF)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < 4.2.0"
      }
    ]
  },
  {
    "product": "SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0.1"
      }
    ]
  },
  {
    "product": "SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.1.0"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 4AO U/I 4xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200ecoPN: IO-Link Master",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC ET200pro",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V15.1"
      }
    ]
  },
  {
    "product": "SIMATIC MV400 family",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions < V7.0.6"
      }
    ]
  },
  {
    "product": "SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.0"
      }
    ]
  },
  {
    "product": "SIMATIC RF650R",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0"
      }
    ]
  },
  {
    "product": "SIMATIC RF680R",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0"
      }
    ]
  },
  {
    "product": "SIMATIC RF685R",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1200 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.2.1"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1"
      }
    ]
  },
  {
    "product": "SIMATIC S7-1500 Software Controller (incl. F)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.1"
      }
    ]
  },
  {
    "product": "SIMATIC S7-200 SMART",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.3"
      }
    ]
  },
  {
    "product": "SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.X.14"
      }
    ]
  },
  {
    "product": "SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.0.7"
      }
    ]
  },
  {
    "product": "SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V6.0.6"
      }
    ]
  },
  {
    "product": "SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V7.0.2"
      }
    ]
  },
  {
    "product": "SIMATIC S7-410 CPU family (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.2"
      }
    ]
  },
  {
    "product": "SIMATIC TDC CP51M1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.1.8"
      }
    ]
  },
  {
    "product": "SIMATIC TDC CPU555",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.1.1"
      }
    ]
  },
  {
    "product": "SIMATIC Teleservice Adapter IE Advanced",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC Teleservice Adapter IE Basic",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC Teleservice Adapter IE Standard",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC WinAC RTX (F) 2010",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < SIMATIC WinAC RTX 2010 SP3"
      }
    ]
  },
  {
    "product": "SIMOCODE pro V PN (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.0.0"
      }
    ]
  },
  {
    "product": "SIMOTION (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.5 HF1"
      }
    ]
  },
  {
    "product": "SINAMICS DCM w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.4 SP1 HF5"
      }
    ]
  },
  {
    "product": "SINAMICS DCP w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.2 HF1"
      }
    ]
  },
  {
    "product": "SINAMICS G110M w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 SP6 HF3"
      }
    ]
  },
  {
    "product": "SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 SP6 HF3"
      }
    ]
  },
  {
    "product": "SINAMICS G130 V4.7 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 HF27"
      }
    ]
  },
  {
    "product": "SINAMICS G130 V4.8 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.8 HF4"
      }
    ]
  },
  {
    "product": "SINAMICS G150 V4.7 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V4.7: All versions < V4.7 HF27"
      }
    ]
  },
  {
    "product": "SINAMICS G150 V4.8 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.8 HF4"
      }
    ]
  },
  {
    "product": "SINAMICS S110 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.4 SP3 HF5"
      }
    ]
  },
  {
    "product": "SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 HF27"
      }
    ]
  },
  {
    "product": "SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.8 HF4"
      }
    ]
  },
  {
    "product": "SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7"
      }
    ]
  },
  {
    "product": "SINAMICS S150 V4.7 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 HF27"
      }
    ]
  },
  {
    "product": "SINAMICS S150 V4.8 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.8 HF4"
      }
    ]
  },
  {
    "product": "SINAMICS V90 w. PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.01"
      }
    ]
  },
  {
    "product": "SINUMERIK 828D V4.5 and prior",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.5 SP6 HF2"
      }
    ]
  },
  {
    "product": "SINUMERIK 828D V4.7",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 SP4 HF1"
      }
    ]
  },
  {
    "product": "SINUMERIK 840D sl V4.5 and prior",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.5 SP6 HF2"
      }
    ]
  },
  {
    "product": "SINUMERIK 840D sl V4.7",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V4.7 SP4 HF1"
      }
    ]
  },
  {
    "product": "SIRIUS ACT 3SU1 interface module PROFINET",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.1.0"
      }
    ]
  },
  {
    "product": "SIRIUS Motor Starter M200D PROFINET",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIRIUS Soft Starter 3RW44 PN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SITOP PSU8600 PROFINET",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.2.0"
      }
    ]
  },
  {
    "product": "SITOP UPS1600 PROFINET (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V2.2.0"
      }
    ]
  },
  {
    "product": "Softnet PROFINET IO for PC-based Windows systems",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14 SP1"
      }
    ]
  }
]