CVE-2017-12741
Quick assessment
Affected
Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Siemens SIMATIC S7-1500 CPU等都是德国西门子（Siemens）公司的产品。SIMATIC S7-1500 CPU是一款CPU（中央处理器）模块。SIMATIC S7-1500是一款可编程逻辑控制器。SINUMERIK 840D sl是一套高级机床数控系统。 多款Siemens产品中存在资源管理错误漏洞。远程攻击者可通过向161/udp端口发送特制的数据包利用该漏洞造成拒绝服务。以下产品和版本受到影响：Siemens SIMATIC S7-200 Smart V2.03.01之前的
Possible ATT&CK Techniques 2 AI
T1027 · Obfuscated Files or Information T1041 · Exfiltration Over C2 Channel
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-12741
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
多款Siemens产品资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens SIMATIC S7-1500 CPU等都是德国西门子（Siemens）公司的产品。SIMATIC S7-1500 CPU是一款CPU（中央处理器）模块。SIMATIC S7-1500是一款可编程逻辑控制器。SINUMERIK 840D sl是一套高级机床数控系统。 多款Siemens产品中存在资源管理错误漏洞。远程攻击者可通过向161/udp端口发送特制的数据包利用该漏洞造成拒绝服务。以下产品和版本受到影响：Siemens SIMATIC S7-200 Smart V2.03.01之前的
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2017-12741
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-12741
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-12741 (7)
-
https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf x_refsource_CONFIRM
-
https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf x_refsource_CONFIRM
-
IV. Related Vulnerabilities
Same weakness: CWE-400
-
CVE-2026-90582
evanchiu serverless-todo API Todo Endpoint index.js saveTodo -
CVE-2026-90554
vLLM before 0.28.0 Denial of Service via audio extraction -
CVE-2026-50018
Hoverfly: Denial of Service via Goroutine Leak in Remote Pos -
CVE-2026-54135
AirSane has a Remote Denial of Service (OOM) via Unvalidated -
CVE-2026-68497
jackson-databind: unbounded numeric parse in Duration and XM
V. Comments for CVE-2017-12741
No comments yet