CVE-2017-2681 | THREATINT

Assigner	siemens
Reserved	2016-12-01
Published	2017-05-11
Updated	2024-09-10

Description

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

MEDIUM: 6.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
HIGH: 7.1	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-400: Uncontrolled Resource Consumption

Product status

Default status

unknown

All versions < V4.1.1 Patch04

affected

Default status

unknown

All versions < V4.2.1 Patch03

affected

Default status

unknown

All versions < V4.4.0 Patch01

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V3.0

affected

Default status

unknown

All versions < V4.03

affected

Default status

unknown

All versions < V6.1

affected

Default status

unknown

All versions < V5.2.2

affected

Default status

unknown

All versions < V5.4.0

affected

Default status

unknown

All versions < V4.1.0

affected

Default status

unknown

All versions < V4.1.0

affected

Default status

unknown

All versions < V3.10.2

affected

Default status

unknown

All versions < V6.1

affected

Default status

unknown

All versions < V6.1

affected

Default status

unknown

All versions < V2.0

affected

Default status

unknown

All versions < V1.0.15

affected

Default status

unknown

All versions < V2.1.82

affected

Default status

unknown

Any version before *

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V2.1.82

affected

Default status

unknown

All versions < V1.0.15

affected

Default status

unknown

All versions < V2.1

affected

Default status

unknown

All versions < V1.0.15

affected

Default status

unknown

All versions < V2.7

affected

Default status

unknown

All versions < V2.7

affected

Default status

unknown

All versions < V3.1.3

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V3.1.3

affected

Default status

unknown

All versions < V3.2.17

affected

Default status

unknown

All versions < V3.2.17

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V2.7

affected

Default status

unknown

Any version before V1.0.2

affected

Default status

unknown

All versions

affected

Default status

unknown

Any version before V4.0.1

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.0.1

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V15.1

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

Any version before V7.0.6

affected

Default status

unknown

All versions < V4.0

affected

Default status

unknown

All versions < V3.0

affected

Default status

unknown

All versions < V3.0

affected

Default status

unknown

All versions < V3.0

affected

Default status

unknown

All versions < V4.2.1

affected

Default status

unknown

All versions < V2.1

affected

Default status

unknown

All versions < V2.1

affected

Default status

unknown

All versions < V2.3

affected

Default status

unknown

Any version before V3.X.14

affected

Default status

unknown

Any version before V6.0.7

affected

Default status

unknown

Any version before V6.0.6

affected

Default status

unknown

Any version before V7.0.2

affected

Default status

unknown

All versions < V8.2

affected

Default status

unknown

Any version before V1.1.8

affected

Default status

unknown

Any version before V1.1.1

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V2010 SP3

affected

Default status

unknown

All versions < V2010 SP3

affected

Default status

unknown

All versions < V2.0.0

affected

Default status

unknown

All versions < V4.5 HF1

affected

Default status

unknown

All versions < V1.4 SP1 HF5

affected

Default status

unknown

All versions < V1.2 HF1

affected

Default status

unknown

All versions < V4.7 SP6 HF3

affected

Default status

unknown

All versions < V4.7 SP6 HF3

affected

Default status

unknown

All versions < V4.7 HF27

affected

Default status

unknown

All versions < V4.8 HF4

affected

Default status

unknown

V4.7: All versions < V4.7 HF27

affected

Default status

unknown

All versions < V4.8 HF4

affected

Default status

unknown

All versions < V4.4 SP3 HF5

affected

Default status

unknown

All versions < V4.7

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V4.7 HF27

affected

Default status

unknown

All versions < V4.8 HF4

affected

Default status

unknown

All versions < V4.7 HF27

affected

Default status

unknown

All versions < V4.8 HF4

affected

Default status

unknown

All versions < V1.01

affected

Default status

unknown

All versions < V4.5 SP6 HF2

affected

Default status

unknown

All versions < V4.7 SP4 HF1

affected

Default status

unknown

All versions < V4.5 SP6 HF2

affected

Default status

unknown

All versions < V4.7 SP4 HF1

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.2.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

Any version before V4.1.0

affected

Default status

unknown

All versions < V1.1.0

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions

affected

Default status

unknown

All versions < V1.2.0

affected

Default status

unknown

All versions < V2.2.0

affected

Default status

unknown

All versions < V14 SP1

affected

References

http://www.securitytracker.com/id/1038463 (1038463) vdb-entry

http://www.securityfocus.com/bid/98369 (98369) vdb-entry

https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf

https://cert-portal.siemens.com/productcert/html/ssa-293562.html

cve.org CVE-2017-2681

nvd.nist.gov CVE-2017-2681

Download JSON