CVEvulnerability

CVE-2017-2680

7.1 HIGH Published 2017-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.1 HIGH — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-400

Description

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Affected configurations

• siemens simatic cp 343-1 std firmware (< 3.1.3) • siemens simatic cp 343-1 lean firmware (< 3.1.3) • siemens simatic cp 343-1 adv firmware • siemens simatic cp 443-1 std firmware (< 3.2.17) • siemens simatic cp 443-1 adv firmware (< 3.2.17) • siemens simatic cp 443-1 opc-ua firmware • siemens simatic cp 1243-1 firmware (< 2.1.82) • siemens simatic cm 1542-1 firmware (< 2.0) • siemens simatic cp 1542sp-1 firmware (< 1.0.15) • siemens simatic cp 1542sp-1 irc firmware (< 1.0.15) • siemens simatic cp 1543sp-1 firmware (< 1.0.15) • siemens simatic cp 1543-1 firmware (< 2.1) • siemens simatic rf650r firmware (< 3.0) • siemens simatic rf680r firmware (< 3.0) • siemens simatic rf685r firmware (< 3.0) • siemens simatic cp 1616 firmware (< 2.7) • siemens simatic cp 1604 firmware (< 2.7) • siemens simatic dk-1616 pn io firmware (< 2.7) • siemens scalance x200 firmware (< 5.2.2) • siemens scalance x200 irt firmware (< 5.4.0) • siemens scalance x300 firmware (< 4.1.0) • siemens scalance x408 firmware (< 4.1.0) • siemens scalance x414 firmware (< 3.10.2) • siemens scalance xm400 firmware (< 6.1) • siemens scalance xr500 firmware (< 6.1) • siemens scalance w700 firmware (< 6.1) • siemens scalance m-800 firmware (< 4.03) • siemens scalance s615 firmware (< 4.03) • siemens softnet profinet io firmware (< 14) • siemens softnet profinet io firmware 14 • siemens ie\/pb-link firmware (< 3.0) • siemens ie\/as-i link pn io firmware • siemens simatic teleservice adapter ie standard firmware • siemens simatic teleservice adapter ie basic firmware • siemens simatic teleservice adapter ie advanced firmware • siemens sitop psu8600 firmware (< 1.2.0) • siemens ups1600 profinet firmware (< 2.2.0) • siemens simatic et 200al firmware (< 1.0.2) • siemens simatic et 200ecopn firmware • siemens simatic et 200m firmware • siemens simatic et 200mp firmware (< 4.0.1) • siemens simatic et 200pro firmware • siemens simatic et 200s firmware • siemens simatic et 200sp firmware (< 4.1.0) • siemens pn\/pn coupler firmware (< 4.0) • siemens dk standard ethernet controller firmware (< 4.1.1) • siemens dk standard ethernet controller firmware 4.1.1 • siemens ek-ertec 200p pn io firmware (< 4.4.0) • siemens ek-ertec 200p pn io firmware 4.4.0 • siemens ek-ertec 200 pn io firmware (< 4.2.1) • siemens ek-ertec 200 pn io firmware 4.2.1 • siemens simatic s7-200 smart firmware (< 2.3) • siemens simatic s7-300 firmware • siemens simatic s7-400 firmware (< 6.0.6) • siemens simatic s7-1200 firmware (< 4.2.1) • siemens simatic s7-1500 firmware (< 2.1) • siemens simatic s7-1500 software controller firmware (< 2.1) • siemens simatic winac rtx firmware (< 2010) • siemens simatic winac rtx firmware 2010 • siemens sirius act 3su1 firmware (< 1.1.0) … and 55 more

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References