NetSight
medium6.5

CVE-2017-2680

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).

Impact

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Affected products

VendorProductAffected versions
SiemensSimatic Cp 343-1 Std Firmware
before 3.1.3
SiemensSimatic Cp 343-1 Lean Firmware
before 3.1.3
SiemensSimatic Cp 343-1 Adv Firmware
All versions
SiemensSimatic Cp 443-1 Std Firmware
before 3.2.17
SiemensSimatic Cp 443-1 Adv Firmware
before 3.2.17
SiemensSimatic Cp 443-1 Opc-Ua Firmware
All versions
SiemensSimatic Cp 1243-1 Firmware
before 2.1.82
SiemensSimatic Cm 1542-1 Firmware
before 2.0
SiemensSimatic Cp 1542sp-1 Firmware
before 1.0.15
SiemensSimatic Cp 1542sp-1 Irc Firmware
before 1.0.15
SiemensSimatic Cp 1543sp-1 Firmware
before 1.0.15
SiemensSimatic Cp 1543-1 Firmware
before 2.1

Weakness classification

References