vulnwire
7.5high

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
3.3%
percentile 89%
Public exploits
0
none known

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

Exploit prediction (EPSS)

3.31% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA4.08.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CNA4.08.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD2.07.8AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

  • Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
  • Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
  • Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
  • Siemens SIMATIC Compact Field Unit
  • Siemens SIMATIC ET 200AL IM 157-1 PN
  • Siemens SIMATIC ET 200M (incl. SIPLUS variants)
  • Siemens SIMATIC ET 200MP IM 155-5 PN BA
  • Siemens SIMATIC ET 200MP IM 155-5 PN HF
  • Siemens SIMATIC ET 200MP IM 155-5 PN ST
  • Siemens SIMATIC ET 200pro IM 154-3 PN HF
  • Siemens SIMATIC ET 200pro IM 154-4 PN HF
  • Siemens SIMATIC ET 200SP IM 155-6 PN BA
  • Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
  • Siemens SIMATIC ET 200SP IM 155-6 PN HF
  • Siemens SIMATIC ET 200SP IM 155-6 PN HS
  • Siemens SIMATIC ET 200SP IM 155-6 PN ST
  • Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
  • Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
  • Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
  • Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12
  • Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
  • Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
  • Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
  • Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
  • Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
  • Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
  • Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
  • Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
  • Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
  • Siemens SIMATIC ET200ecoPN: IO-Link Master
  • Siemens SIMATIC ET200S (incl. SIPLUS variants)
  • Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
  • Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
  • Siemens SIMATIC S7-1500 Software Controller
  • Siemens SIMATIC S7-200 SMART
  • Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
  • Siemens SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
  • Siemens SIMATIC TDC CP51M1
  • Siemens SIMATIC TDC CPU555
  • Siemens SIMATIC WinAC RTX 2010
  • Siemens SIMATIC WinAC RTX F 2010
  • Siemens SIMOCODE pro V PROFINET (incl. SIPLUS variants)
  • Siemens SIMOTION C
  • Siemens SIMOTION D
  • Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
  • Siemens SIMOTION P V4.4 and V4.5

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.