CVE-2017-2680

CVSS V2 Medium 6.1 CVSS V3 Medium 6.5
Description
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
Overview
  • CVE ID
  • CVE-2017-2680
  • Assigner
  • productcert@siemens.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2017-05-11T01:29:05
  • Last Modified Date
  • 2022-04-12T18:29:01
Weakness Enumerations
CWE URL
CWE-400 http://cwe.mitre.org/data/definitions/400.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:siemens:simatic_cp_343-1_std_firmware:*:*:*:*:*:*:*:* 1 OR 3.1.3
cpe:2.3:h:siemens:simatic_cp_343-1_std:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:*:*:*:*:*:*:*:* 1 OR 3.1.3
cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_343-1_adv_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_cp_343-1_adv:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_443-1_std_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.17
cpe:2.3:h:siemens:simatic_cp_443-1_std:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_443-1_adv_firmware:*:*:*:*:*:*:*:* 1 OR 3.2.17
cpe:2.3:h:siemens:simatic_cp_443-1_adv:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_443-1_opc-ua_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_cp_443-1_opc-ua:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:* 1 OR 2.1.82
cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cm_1542-1_firmware:*:*:*:*:*:*:*:* 1 OR 2.0
cpe:2.3:h:siemens:simatic_cm_1542-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.0.15
cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* 1 OR 1.0.15
cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* 1 OR 1.0.15
cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:* 1 OR 2.1
cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_rf650r_firmware:*:*:*:*:*:*:*:* 1 OR 3.0
cpe:2.3:h:siemens:simatic_rf650r:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_rf680r_firmware:*:*:*:*:*:*:*:* 1 OR 3.0
cpe:2.3:h:siemens:simatic_rf680r:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_rf685r_firmware:*:*:*:*:*:*:*:* 1 OR 3.0
cpe:2.3:h:siemens:simatic_rf685r:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1616_firmware:*:*:*:*:*:*:*:* 1 OR 2.7
cpe:2.3:h:siemens:simatic_cp_1616:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1604_firmware:*:*:*:*:*:*:*:* 1 OR 2.7
cpe:2.3:h:siemens:simatic_cp_1604:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_dk-1616_pn_io_firmware:*:*:*:*:*:*:*:* 1 OR 2.7
cpe:2.3:h:siemens:simatic_dk-1616_pn_io:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_x200_firmware:*:*:*:*:*:*:*:* 1 OR 5.2.2
cpe:2.3:h:siemens:scalance_x200:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_x200_irt_firmware:*:*:*:*:*:*:*:* 1 OR 5.4.0
cpe:2.3:h:siemens:scalance_x200_irt:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:* 1 OR 4.1.0
cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:* 1 OR 4.1.0
cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_x414_firmware:*:*:*:*:*:*:*:* 1 OR 3.10.2
cpe:2.3:h:siemens:scalance_x414:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:* 1 OR 6.1
cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:* 1 OR 6.1
cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:* 1 OR 6.1
cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* 1 OR 4.03
cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* 1 OR 4.03
cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:softnet_profinet_io_firmware:*:*:*:*:*:*:*:* 1 OR 14
cpe:2.3:o:siemens:softnet_profinet_io_firmware:14:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:softnet_profinet_io:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:ie\/pb-link_firmware:*:*:*:*:*:*:*:* 1 OR 3.0
cpe:2.3:h:siemens:ie\/pb-link:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:ie\/as-i_link_pn_io_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:ie\/as-i_link_pn_io:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_standard_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_standard:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced_modem:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:* 1 OR 1.2.0
cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:ups1600_profinet_firmware:*:*:*:*:*:*:*:* 1 OR 2.2.0
cpe:2.3:h:siemens:ups1600_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200al_firmware:*:*:*:*:*:*:*:* 1 OR 1.0.2
cpe:2.3:h:siemens:simatic_et_200al:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200ecopn_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_et_200ecopn:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200m_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_et_200m:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200mp_firmware:*:*:*:*:*:*:*:* 1 OR 4.0.1
cpe:2.3:h:siemens:simatic_et_200mp:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200pro_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_et_200pro:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200s_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_et_200s:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_et_200sp_firmware:*:*:*:*:*:*:*:* 1 OR 4.1.0
cpe:2.3:h:siemens:simatic_et_200sp:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:pn\/pn_coupler_firmware:*:*:*:*:*:*:*:* 1 OR 4.0
cpe:2.3:h:siemens:pn\/pn_coupler:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:*:*:*:*:*:*:*:* 1 OR 4.1.1
cpe:2.3:o:siemens:dk_standard_ethernet_controller_firmware:4.1.1:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:dk_standard_ethernet_controller:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:*:*:*:*:*:*:*:* 1 OR 4.4.0
cpe:2.3:o:siemens:ek-ertec_200p_pn_io_firmware:4.4.0:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:ek-ertec_200p_pn_io:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:*:*:*:*:*:*:*:* 1 OR 4.2.1
cpe:2.3:o:siemens:ek-ertec_200_pn_io_firmware:4.2.1:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:ek-ertec_200_pn_io:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_s7-200_smart_firmware:*:*:*:*:*:*:*:* 1 OR 2.3
cpe:2.3:h:siemens:simatic_s7-200_smart:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_s7-300_firmware:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_s7-400_firmware:*:*:*:*:*:*:*:* 1 OR 6.0.6
cpe:2.3:h:siemens:simatic_s7-400:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_s7-1200_firmware:*:*:*:*:*:*:*:* 1 OR 4.2.1
cpe:2.3:h:siemens:simatic_s7-1200:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* 1 OR 2.1
cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_s7-1500_software_controller_firmware:*:*:*:*:*:*:*:* 1 OR 2.1
cpe:2.3:h:siemens:simatic_s7-1500_software_controller:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:* 1 OR 2010
cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sirius_act_3su1_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.0
cpe:2.3:h:siemens:sirius_act_3su1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sirius_soft_starter_3rw44_pn_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sirius_soft_starter_3rw44_pn:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sirius_motor_starter_m200d_profinet_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sirius_motor_starter_m200d_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simocode_pro_v_profinet_firmware:*:*:*:*:*:*:*:* 1 OR 2.0.0
cpe:2.3:h:siemens:simocode_pro_v_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_dcm_firmware:*:*:*:*:*:*:*:* 1 OR 1.4
cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:-:*:*:*:*:*:* 1 OR
cpe:2.3:o:siemens:sinamics_dcm_firmware:1.4:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_dcm:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_dcp_firmware:*:*:*:*:*:*:*:* 1 OR 1.2
cpe:2.3:o:siemens:sinamics_dcp_firmware:1.2:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_dcp:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_g110m_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_g110m_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_g110m:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_g120\(c\/p\/d\)_w._pn_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_g120\(c\/p\/d\)_w._pn_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_g120\(c\/p\/d\)_w._pn:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_g130_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_g150_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics__s110_pn_firmware:*:*:*:*:*:*:*:* 1 OR 4.4
cpe:2.3:o:siemens:sinamics__s110_pn_firmware:4.4:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:_s110_pn:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_s120_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_s150_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_v90_pn_firmware:*:*:*:*:*:*:*:* 1 OR 1.01
cpe:2.3:h:siemens:sinamics_v90_pn:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simotion_firmware:*:*:*:*:*:*:*:* 1 OR 4.5
cpe:2.3:o:siemens:simotion_firmware:4.5:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simotion:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinumerik_828d_firmware:*:*:*:*:*:*:*:* 1 OR 4.5
cpe:2.3:o:siemens:sinumerik_828d_firmware:4.5:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinumerik_828d:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:*:*:*:*:*:*:*:* 1 OR 4.5
cpe:2.3:o:siemens:sinumerik_840d_sl_firmware:4.5:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinumerik_840d_sl:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_hmi_comfort_panels:*:*:*:*:*:*:*:* 1 OR 15.1
cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_hmi_multi_panels:*:*:*:*:*:*:*:* 1 OR 15.1
cpe:2.3:h:siemens:simatic_hmi_multi_panels:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_hmi_mobile_panels:*:*:*:*:*:*:*:* 1 OR 15.1
cpe:2.3:h:siemens:simatic_hmi_mobile_panels:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1243-1_irc_firmware:*:*:*:*:*:*:*:* 1 OR 2.1.82
cpe:2.3:h:siemens:simatic_cp_1243-1_irc:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_dk-1604_pn_io_firmware:*:*:*:*:*:*:*:* 1 OR 2.7
cpe:2.3:h:siemens:simatic_dk-1604_pn_io:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.1
cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:* 1 OR 1.1.8
cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_gh150_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:* 1 OR 4.8
cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:* 1 OR 4.7
cpe:2.3:o:siemens:sinamics_gm150_firmware:4.7:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:* 1 OR 4.8
cpe:2.3:o:siemens:sinamics_sl150_firmware:4.8:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:* 1 OR 4.8
cpe:2.3:o:siemens:sinamics_sm120_firmware:4.8:-:*:*:*:*:*:* 1 OR
cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:extension_unit_12_profinet_firmware:*:*:*:*:*:*:*:* 1 OR 01.01.01
cpe:2.3:h:siemens:extension_unit_12_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:extension_unit_15_profinet_firmware:*:*:*:*:*:*:*:* 1 OR 01.01.01
cpe:2.3:h:siemens:extension_unit_15_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:extension_unit_19_profinet_firmware:*:*:*:*:*:*:*:* 1 OR 01.01.01
cpe:2.3:h:siemens:extension_unit_19_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:extension_unit_22_profinet_firmware:*:*:*:*:*:*:*:* 1 OR 01.01.01
cpe:2.3:h:siemens:extension_unit_22_profinet:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_firmware:*:*:*:*:*:*:*:* 1 OR 2.1.82
cpe:2.3:h:siemens:simatic_cp_1242-7_gprs:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1243-7_lte\/us_firmware:*:*:*:*:*:*:*:* 1 OR 2.1.82
cpe:2.3:h:siemens:simatic_cp_1243-7_lte\/us:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1243-8_firmware:*:*:*:*:*:*:*:* 1 OR 2.1.82
cpe:2.3:h:siemens:simatic_cp_1243-8:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:siemens:simatic_cp_1626_firmware:*:*:*:*:*:*:*:* 1 OR 1.1
cpe:2.3:h:siemens:simatic_cp_1626:-:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:A/AC:L/Au:N/C:N/I:N/A:C
  • Access Vector
  • ADJACENT_NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 6.1
  • Severity
  • MEDIUM
  • Exploitability Score
  • 6.5
  • Impact Score
  • 6.9
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Attack Vector
  • ADJACENT_NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • NONE
  • Availability Impact
  • HIGH
  • Base Score
  • 6.5
  • Base Severity
  • MEDIUM
  • Exploitability Score
  • 2.8
  • Impact Score
  • 3.6
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/98369 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038463 Third Party Advisory VDB Entry
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf Broken Link
https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02 Third Party Advisory US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2017-2680
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2680
History
Created Old Value New Value Data Type Notes
2022-05-10 15:43:23 Added to TrackCVE
2022-12-02 16:44:49 2017-05-11T01:29Z 2017-05-11T01:29:05 CVE Published Date updated
2022-12-02 16:44:49 2022-04-12T18:29:01 CVE Modified Date updated
2022-12-02 16:44:50 Analyzed Vulnerability Status updated