PT-2012-4441 · Siemens · Simatic S7-400 Pn Cpu

Publicado 2012-07-31 · Atualizado 2020-04-13 · CVE-2012-3017

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x

Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition and service outage. This can be achieved via malformed HTTP traffic or malformed IP packets.

Recommendations For firmware 5.x, apply the necessary configuration changes to restrict malformed HTTP traffic and IP packets to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-3017

Produtos afetados

Simatic S7-400 Pn Cpu

Referências · 4

• http://siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-617264.pdf · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-12-212-02.pdf · Nota
• https://cert-portal.siemens.com/productcert/pdf/ssa-617264.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3017 · Nota de Segurança