CVE-2017-2681: CVE-2017-2681

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-2681

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: NVD (National Vulnerability Database)

Vulnerability Type

未加控制的资源消耗(资源穷尽)

Source: NVD (National Vulnerability Database)

Vulnerability Title

多款Siemens产品资源管理错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Siemens Simatic Hmi是德国西门子（Siemens）公司的一个为工业自动化设备提供人机交互功能的设备。多款Siemens产品中存在资源管理错误漏洞。攻击者可通过向受影响的产品发送特制的PROFINET DCP数据包利用该漏洞造成拒绝服务。以下产品和版本受到影响：Siemens SIMATIC NET CP 343-1 Std（包括： SIPLUS variants）V3.1.3之前版本；SIMATIC NET CP 343-1 Lean （包括：SIPLUS variants）V3.1.

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Siemens	Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller	All versions < V4.1.1 Patch04	-
Siemens	Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200	All versions < V4.2.1 Patch03	-
Siemens	Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P	All versions < V4.4.0 Patch01	-
Siemens	IE/AS-i Link PN IO	All versions	-
Siemens	IE/PB-Link (incl. SIPLUS NET variants)	All versions < V3.0	-
Siemens	SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)	All versions < V4.03	-
Siemens	SCALANCE W-700 IEEE 802.11n family	All versions < V6.1	-
Siemens	SCALANCE X-200 family (incl. SIPLUS NET variants)	All versions < V5.2.2	-
Siemens	SCALANCE X-200IRT family (incl. SIPLUS NET variants)	All versions < V5.4.0	-
Siemens	SCALANCE X-300 family (incl. X408 and SIPLUS NET variants)	All versions < V4.1.0	-
Siemens	SCALANCE X408 family	All versions < V4.1.0	-
Siemens	SCALANCE X414	All versions < V3.10.2	-
Siemens	SCALANCE XM-400 family	All versions < V6.1	-
Siemens	SCALANCE XR-500 family	All versions < V6.1	-
Siemens	SIMATIC CM 1542-1	All versions < V2.0	-
Siemens	SIMATIC CM 1542SP-1	All versions < V1.0.15	-
Siemens	SIMATIC CP 1243-1 (incl. SIPLUS variants)	All versions < V2.1.82	-
Siemens	SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)	0 ~ *	-
Siemens	SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)	All versions	-
Siemens	SIMATIC CP 1243-8 IRC	All versions < V2.1.82	-
Siemens	SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)	All versions < V1.0.15	-
Siemens	SIMATIC CP 1543-1 (incl. SIPLUS variants)	All versions < V2.1	-
Siemens	SIMATIC CP 1543SP-1 (incl. SIPLUS variants)	All versions < V1.0.15	-
Siemens	SIMATIC CP 1604	All versions < V2.7	-
Siemens	SIMATIC CP 1616	All versions < V2.7	-
Siemens	SIMATIC CP 343-1 (incl. SIPLUS variants)	All versions < V3.1.3	-
Siemens	SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)	All versions	-
Siemens	SIMATIC CP 343-1 Lean (incl. SIPLUS variants)	All versions < V3.1.3	-
Siemens	SIMATIC CP 443-1 (incl. SIPLUS variants)	All versions < V3.2.17	-
Siemens	SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)	All versions < V3.2.17	-
Siemens	SIMATIC CP 443-1 OPC UA	All versions	-
Siemens	SIMATIC DK-16xx PN IO	All versions < V2.7	-
Siemens	SIMATIC ET 200AL IM 157-1 PN	0 ~ V1.0.2	-
Siemens	SIMATIC ET 200M (incl. SIPLUS variants)	All versions	-
Siemens	SIMATIC ET 200MP IM 155-5 PN BA	0 ~ V4.0.1	-
Siemens	SIMATIC ET 200MP IM 155-5 PN HF	0 ~ V4.2.0	-
Siemens	SIMATIC ET 200MP IM 155-5 PN ST	0 ~ V4.1.0	-
Siemens	SIMATIC ET 200pro IM 154-3 PN HF	0 ~ *	-
Siemens	SIMATIC ET 200pro IM 154-4 PN HF	0 ~ *	-
Siemens	SIMATIC ET 200SP IM 155-6 PN BA	0 ~ *	-
Siemens	SIMATIC ET 200SP IM 155-6 PN HF	0 ~ V4.2.0	-
Siemens	SIMATIC ET 200SP IM 155-6 PN HS	0 ~ V4.0.1	-
Siemens	SIMATIC ET 200SP IM 155-6 PN ST	0 ~ V4.1.0	-
Siemens	SIMATIC ET 200SP IM 155-6 PN ST BA	0 ~ V4.1.0	-
Siemens	SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 4AO U/I 4xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12	All versions	-
Siemens	SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12	All versions	-
Siemens	SIMATIC ET200ecoPN: IO-Link Master	All versions	-
Siemens	SIMATIC ET200S (incl. SIPLUS variants)	All versions	-
Siemens	SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)	All versions < V15.1	-
Siemens	SIMATIC MV420 SR-B	0 ~ V7.0.6	-
Siemens	SIMATIC MV420 SR-B Body	0 ~ V7.0.6	-
Siemens	SIMATIC MV420 SR-P	0 ~ V7.0.6	-
Siemens	SIMATIC MV420 SR-P Body	0 ~ V7.0.6	-
Siemens	SIMATIC MV440 HR	0 ~ V7.0.6	-
Siemens	SIMATIC MV440 SR	0 ~ V7.0.6	-
Siemens	SIMATIC MV440 UR	0 ~ V7.0.6	-
Siemens	SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)	All versions < V4.0	-
Siemens	SIMATIC RF650R	All versions < V3.0	-
Siemens	SIMATIC RF680R	All versions < V3.0	-
Siemens	SIMATIC RF685R	All versions < V3.0	-
Siemens	SIMATIC S7-1200 CPU family (incl. SIPLUS variants)	All versions < V4.2.1	-
Siemens	SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)	All versions < V2.1	-
Siemens	SIMATIC S7-1500 Software Controller	All versions < V2.1	-
Siemens	SIMATIC S7-200 SMART	All versions < V2.3	-
Siemens	SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)	0 ~ V3.X.14	-
Siemens	SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)	0 ~ V6.0.7	-
Siemens	SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)	0 ~ V6.0.6	-
Siemens	SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)	0 ~ V7.0.2	-
Siemens	SIMATIC S7-410 CPU family (incl. SIPLUS variants)	All versions < V8.2	-
Siemens	SIMATIC TDC CP51M1	0 ~ V1.1.8	-
Siemens	SIMATIC TDC CPU555	0 ~ V1.1.1	-
Siemens	SIMATIC Teleservice Adapter IE Advanced	All versions	-
Siemens	SIMATIC Teleservice Adapter IE Basic	All versions	-
Siemens	SIMATIC Teleservice Adapter IE Standard	All versions	-
Siemens	SIMATIC WinAC RTX 2010	All versions < V2010 SP3	-
Siemens	SIMATIC WinAC RTX F 2010	All versions < V2010 SP3	-
Siemens	SIMOCODE pro V PROFINET (incl. SIPLUS variants)	All versions < V2.0.0	-
Siemens	SIMOTION	All versions < V4.5 HF1	-
Siemens	SINAMICS DCM w. PN	All versions < V1.4 SP1 HF5	-
Siemens	SINAMICS DCP w. PN	All versions < V1.2 HF1	-
Siemens	SINAMICS G110M w. PN	All versions < V4.7 SP6 HF3	-
Siemens	SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)	All versions < V4.7 SP6 HF3	-
Siemens	SINAMICS G130 V4.7 w. PN	All versions < V4.7 HF27	-
Siemens	SINAMICS G130 V4.8 w. PN	All versions < V4.8 HF4	-
Siemens	SINAMICS G150 V4.7 w. PN	V4.7: All versions < V4.7 HF27	-
Siemens	SINAMICS G150 V4.8 w. PN	All versions < V4.8 HF4	-
Siemens	SINAMICS S110 w. PN	All versions < V4.4 SP3 HF5	-
Siemens	SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)	All versions < V4.7	-
Siemens	SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)	All versions	-
Siemens	SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)	All versions < V4.7 HF27	-
Siemens	SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)	All versions < V4.8 HF4	-
Siemens	SINAMICS S150 V4.7 w. PN	All versions < V4.7 HF27	-
Siemens	SINAMICS S150 V4.8 w. PN	All versions < V4.8 HF4	-
Siemens	SINAMICS V90 w. PN	All versions < V1.01	-
Siemens	SINUMERIK 828D V4.5 and prior	All versions < V4.5 SP6 HF2	-
Siemens	SINUMERIK 828D V4.7	All versions < V4.7 SP4 HF1	-
Siemens	SINUMERIK 840D sl V4.5 and prior	All versions < V4.5 SP6 HF2	-
Siemens	SINUMERIK 840D sl V4.7	All versions < V4.7 SP4 HF1	-
Siemens	SIPLUS ET 200MP IM 155-5 PN HF	0 ~ V4.2.0	-
Siemens	SIPLUS ET 200MP IM 155-5 PN HF	0 ~ V4.2.0	-
Siemens	SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL	0 ~ V4.2.0	-
Siemens	SIPLUS ET 200MP IM 155-5 PN ST	0 ~ V4.1.0	-
Siemens	SIPLUS ET 200MP IM 155-5 PN ST TX RAIL	0 ~ V4.1.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	0 ~ V4.2.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	0 ~ V4.2.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL	0 ~ V4.2.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN ST	0 ~ V4.1.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN ST BA	0 ~ V4.1.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL	0 ~ V4.1.0	-
Siemens	SIPLUS ET 200SP IM 155-6 PN ST TX RAIL	0 ~ V4.1.0	-
Siemens	SIRIUS ACT 3SU1 interface module PROFINET	All versions < V1.1.0	-
Siemens	SIRIUS Motor Starter M200D PROFINET	All versions	-
Siemens	SIRIUS Soft Starter 3RW44 PN	All versions	-
Siemens	SITOP PSU8600 PROFINET	All versions < V1.2.0	-
Siemens	SITOP UPS1600 PROFINET (incl. SIPLUS variants)	All versions < V2.2.0	-
Siemens	Softnet PROFINET IO for PC-based Windows systems	All versions < V14 SP1	-

II. Public POCs for CVE-2017-2681

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2017-2681

Please Login to view more intelligence information

🔗 SSA-293562 V3.4 (Last Update: 2022-02-08): Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Productsx_refsource_MISC
🔗 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdfx_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/html/ssa-293562.html
🔗 http://www.securityfocus.com/bid/98369vdb-entryx_refsource_BID
🔗 http://www.securitytracker.com/id/1038463vdb-entryx_refsource_SECTRACK
https://nvd.nist.gov/vuln/detail/CVE-2017-2681

IV. Related Vulnerabilities

Same product: Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller

Same vendor: Siemens

Same weakness: CWE-400

V. Comments for CVE-2017-2681

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2017-2681

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2017-2681

III. Intelligence Information for CVE-2017-2681

IV. Related Vulnerabilities

V. Comments for CVE-2017-2681

Leave a comment