PT-2017-3763 · Siemens · S7-300+4

Published 2017-05-08 · Updated 2024-09-10 · CVE-2017-2681

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Siemens PROFINET DCP versions (affected versions not specified) SIMATIC HMI Multi Panels and HMI Mobile Panels (affected versions not specified) S7-300/S7-400 devices (affected versions not specified)

Description: The issue is related to insufficient input validation, which can be exploited by sending specially crafted PROFINET DCP packets on a local Ethernet segment to cause a denial of service condition. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Recommendations: For SIMATIC HMI Multi Panels and HMI Mobile Panels, restrict access to the local Ethernet segment to minimize the risk of exploitation. For S7-300/S7-400 devices, consider implementing network segmentation to limit the attack surface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2019-00516

CVE-2017-2681

Affected Products

Hmi Mobile Panels

S7-300

S7-400

Simatic Hmi Multi Panels

Siemens Profinet Dcp

References · 11

• https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2681 · Security Note
• https://bdu.fstec.ru/vul/2019-00516 · Security Note
• https://osv.dev/vulnerability/CVE-2017-2681 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-293562.html · Note
• http://securityfocus.com/bid/98369 · Note
• https://t.me/cvenotify/85511 · Telegram Post
• https://t.me/cvenotify/93930 · Telegram Post
• https://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-293562.pdf · Note
• http://securitytracker.com/id/1038463 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-129-02 · Note