CVE-2017-2680
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens | Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller | All versions < V4.1.1 Patch04 | affected |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 | All versions < V4.2.1 Patch03 | affected |
| Siemens | Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P | All versions < V4.4.0 Patch01 | affected |
| Siemens | Extension Unit 12" PROFINET | All versions < V01.01.01 | affected |
| Siemens | Extension Unit 15" PROFINET | All versions < V01.01.01 | affected |
| Siemens | Extension Unit 19" PROFINET | All versions < V01.01.01 | affected |
| Siemens | Extension Unit 22" PROFINET | All versions < V01.01.01 | affected |
| Siemens | IE/AS-i Link PN IO | All versions | affected |
| Siemens | IE/PB-Link (incl. SIPLUS NET variants) | All versions < V3.0 | affected |
| Siemens | SCALANCE M-800 family (incl. S615, MUM-800 and RM1224) | All versions < V4.03 | affected |
| Siemens | SCALANCE W-700 IEEE 802.11n family | All versions < V6.1 | affected |
| Siemens | SCALANCE X-200 family (incl. SIPLUS NET variants) | All versions < V5.2.2 | affected |
| Siemens | SCALANCE X-200IRT family (incl. SIPLUS NET variants) | All versions < V5.4.0 | affected |
| Siemens | SCALANCE X-300 family (incl. X408 and SIPLUS NET variants) | All versions < V4.1.0 | affected |
| Siemens | SCALANCE X408 family | All versions < V4.1.0 | affected |
| Siemens | SCALANCE X414 | All versions < V3.10.2 | affected |
| Siemens | SCALANCE XM-400 family | All versions < V6.1 | affected |
| Siemens | SCALANCE XR-500 family | All versions < V6.1 | affected |
| Siemens | SIMATIC CM 1542-1 | All versions < V2.0 | affected |
| Siemens | SIMATIC CM 1542SP-1 | All versions < V1.0.15 | affected |
| Siemens | SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) | All versions < V2.1.82 | affected |
| Siemens | SIMATIC CP 1243-1 (incl. SIPLUS variants) | All versions < V2.1.82 | affected |
| Siemens | SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) | 0 < * | affected |
| Siemens | SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) | All versions | affected |
| Siemens | SIMATIC CP 1243-7 LTE US | All versions < V2.1.82 | affected |
| Siemens | SIMATIC CP 1243-8 IRC | All versions < V2.1.82 | affected |
| Siemens | SIMATIC CP 1243-8 IRC | All versions < V2.1.82 | affected |
| Siemens | SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants) | All versions < V1.0.15 | affected |
| Siemens | SIMATIC CP 1543-1 (incl. SIPLUS variants) | All versions < V2.1 | affected |
| Siemens | SIMATIC CP 1543SP-1 (incl. SIPLUS variants) | All versions < V1.0.15 | affected |
| Siemens | SIMATIC CP 1604 | All versions < V2.7 | affected |
| Siemens | SIMATIC CP 1616 | All versions < V2.7 | affected |
| Siemens | SIMATIC CP 1626 | All versions < V1.1 | affected |
| Siemens | SIMATIC CP 343-1 (incl. SIPLUS variants) | All versions < V3.1.3 | affected |
| Siemens | SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) | All versions | affected |
| Siemens | SIMATIC CP 343-1 Lean (incl. SIPLUS variants) | All versions < V3.1.3 | affected |
| Siemens | SIMATIC CP 443-1 (incl. SIPLUS variants) | All versions < V3.2.17 | affected |
| Siemens | SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) | All versions < V3.2.17 | affected |
| Siemens | SIMATIC CP 443-1 OPC UA | All versions | affected |
| Siemens | SIMATIC DK-16xx PN IO | All versions < V2.7 | affected |
| Siemens | SIMATIC ET 200AL IM 157-1 PN | 0 < V1.0.2 | affected |
| Siemens | SIMATIC ET 200M (incl. SIPLUS variants) | All versions | affected |
| Siemens | SIMATIC ET 200MP IM 155-5 PN BA | 0 < V4.0.1 | affected |
| Siemens | SIMATIC ET 200MP IM 155-5 PN HF | 0 < V4.2.0 | affected |
| Siemens | SIMATIC ET 200MP IM 155-5 PN ST | 0 < V4.1.0 | affected |
| Siemens | SIMATIC ET 200pro IM 154-3 PN HF | 0 < * | affected |
| Siemens | SIMATIC ET 200pro IM 154-4 PN HF | 0 < * | affected |
| Siemens | SIMATIC ET 200SP IM 155-6 PN BA | 0 < * | affected |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HF | 0 < V4.2.0 | affected |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HS | 0 < V4.0.1 | affected |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST | 0 < V4.1.0 | affected |
| Siemens | SIMATIC ET 200SP IM 155-6 PN ST BA | 0 < V4.1.0 | affected |
| Siemens | SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 4AO U/I 4xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 | All versions | affected |
| Siemens | SIMATIC ET200ecoPN: IO-Link Master | All versions | affected |
| Siemens | SIMATIC ET200S (incl. SIPLUS variants) | All versions | affected |
| Siemens | SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants) | All versions < V15.1 | affected |
| Siemens | SIMATIC MV420 SR-B | 0 < V7.0.6 | affected |
| Siemens | SIMATIC MV420 SR-B Body | 0 < V7.0.6 | affected |
| Siemens | SIMATIC MV420 SR-P | 0 < V7.0.6 | affected |
| Siemens | SIMATIC MV420 SR-P Body | 0 < V7.0.6 | affected |
| Siemens | SIMATIC MV440 HR | 0 < V7.0.6 | affected |
| Siemens | SIMATIC MV440 SR | 0 < V7.0.6 | affected |
| Siemens | SIMATIC MV440 UR | 0 < V7.0.6 | affected |
| Siemens | SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) | All versions < V4.0 | affected |
| Siemens | SIMATIC RF650R | All versions < V3.0 | affected |
| Siemens | SIMATIC RF680R | All versions < V3.0 | affected |
| Siemens | SIMATIC RF685R | All versions < V3.0 | affected |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | All versions < V4.2.1 | affected |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | All versions < V2.1 | affected |
| Siemens | SIMATIC S7-1500 Software Controller | All versions < V2.1 | affected |
| Siemens | SIMATIC S7-200 SMART | All versions < V2.3 | affected |
| Siemens | SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) | 0 < V3.X.14 | affected |
| Siemens | SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) | 0 < V6.0.7 | affected |
| Siemens | SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) | 0 < V6.0.6 | affected |
| Siemens | SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) | 0 < V7.0.2 | affected |
| Siemens | SIMATIC S7-410 CPU family (incl. SIPLUS variants) | All versions < V8.2 | affected |
| Siemens | SIMATIC TDC CP51M1 | 0 < V1.1.8 | affected |
| Siemens | SIMATIC TDC CPU555 | 0 < V1.1.1 | affected |
| Siemens | SIMATIC Teleservice Adapter IE Advanced | All versions | affected |
| Siemens | SIMATIC Teleservice Adapter IE Basic | All versions | affected |
| Siemens | SIMATIC Teleservice Adapter IE Standard | All versions | affected |
| Siemens | SIMATIC WinAC RTX 2010 | All versions < V2010 SP3 | affected |
| Siemens | SIMATIC WinAC RTX F 2010 | All versions < V2010 SP3 | affected |
| Siemens | SIMOCODE pro V PROFINET (incl. SIPLUS variants) | All versions < V2.0.0 | affected |
| Siemens | SIMOTION | All versions < V4.5 HF1 | affected |
| Siemens | SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants) | All versions < V4.4 HF26 | affected |
| Siemens | SINAMICS DCM w. PN | All versions < V1.4 SP1 HF5 | affected |
| Siemens | SINAMICS DCP w. PN | All versions < V1.2 HF1 | affected |
| Siemens | SINAMICS G110M w. PN | All versions < V4.7 SP6 HF3 | affected |
| Siemens | SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants) | All versions < V4.7 SP6 HF3 | affected |
| Siemens | SINAMICS G130 V4.7 w. PN | All versions < V4.7 HF27 | affected |
| Siemens | SINAMICS G130 V4.8 w. PN | All versions < V4.8 HF4 | affected |
| Siemens | SINAMICS G150 V4.7 w. PN | V4.7: All versions < V4.7 HF27 | affected |
| Siemens | SINAMICS G150 V4.8 w. PN | All versions < V4.8 HF4 | affected |
| Siemens | SINAMICS GH150 V4.7 w. PROFINET | All versions < V4.7 SP5 HF7 | affected |
| Siemens | SINAMICS GL150 V4.7 w. PROFINET | All versions < V4.8 SP2 | affected |
| Siemens | SINAMICS GM150 V4.7 w. PROFINET | All versions < V4.7 HF31 | affected |
| Siemens | SINAMICS S110 w. PN | All versions < V4.4 SP3 HF5 | affected |
| Siemens | SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants) | All versions < V4.7 | affected |
| Siemens | SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants) | All versions | affected |
| Siemens | SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants) | All versions < V4.7 HF27 | affected |
| Siemens | SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants) | All versions < V4.8 HF4 | affected |
| Siemens | SINAMICS S150 V4.7 w. PN | All versions < V4.7 HF27 | affected |
| Siemens | SINAMICS S150 V4.8 w. PN | All versions < V4.8 HF4 | affected |
| Siemens | SINAMICS SL150 V4.7.0 w. PROFINET | All versions < V4.7 HF30 | affected |
| Siemens | SINAMICS SL150 V4.7.4 w. PROFINET | All versions < V4.8 SP2 | affected |
| Siemens | SINAMICS SL150 V4.7.5 w. PROFINET | All versions < V4.8 SP2 | affected |
| Siemens | SINAMICS SM120 V4.7 w. PROFINET | All versions < V4.8 SP2 | affected |
| Siemens | SINAMICS V90 w. PN | All versions < V1.01 | affected |
| Siemens | SINUMERIK 828D V4.5 and prior | All versions < V4.5 SP6 HF2 | affected |
| Siemens | SINUMERIK 828D V4.7 | All versions < V4.7 SP4 HF1 | affected |
| Siemens | SINUMERIK 840D sl V4.5 and prior | All versions < V4.5 SP6 HF2 | affected |
| Siemens | SINUMERIK 840D sl V4.7 | All versions < V4.7 SP4 HF1 | affected |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | 0 < V4.2.0 | affected |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | 0 < V4.2.0 | affected |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL | 0 < V4.2.0 | affected |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST | 0 < V4.1.0 | affected |
| Siemens | SIPLUS ET 200MP IM 155-5 PN ST TX RAIL | 0 < V4.1.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | 0 < V4.2.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | 0 < V4.2.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | 0 < V4.2.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST | 0 < V4.1.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA | 0 < V4.1.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL | 0 < V4.1.0 | affected |
| Siemens | SIPLUS ET 200SP IM 155-6 PN ST TX RAIL | 0 < V4.1.0 | affected |
| Siemens | SIRIUS ACT 3SU1 interface module PROFINET | All versions < V1.1.0 | affected |
| Siemens | SIRIUS Motor Starter M200D PROFINET | All versions | affected |
| Siemens | SIRIUS Soft Starter 3RW44 PN | All versions | affected |
| Siemens | SITOP PSU8600 PROFINET | All versions < V1.2.0 | affected |
| Siemens | SITOP UPS1600 PROFINET (incl. SIPLUS variants) | All versions < V2.2.0 | affected |
| Siemens | Softnet PROFINET IO for PC-based Windows systems | All versions < V14 SP1 | affected |
Weaknesses
- CWE-400: CWE-400: Uncontrolled Resource Consumption
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
CVE Program Container
Additional References
- http://www.securitytracker.com/id/1038463
- http://www.securityfocus.com/bid/98369
- https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02
- https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-293562.html
- https://cert-portal.siemens.com/productcert/html/ssa-284673.html
- https://cert-portal.siemens.com/productcert/html/ssa-546832.html
References
- http://www.securitytracker.com/id/1038463
- http://www.securityfocus.com/bid/98369
- https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02
- https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-293562.html
- https://cert-portal.siemens.com/productcert/html/ssa-284673.html
- https://cert-portal.siemens.com/productcert/html/ssa-546832.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.