CVE-2017-12741
High
Description
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Simatic S7-200 Firmware
PublishedDec 26, 2017
First seenDec 26, 2017
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- siemens simatic_s7-200_firmware2.03.01 or later
- siemens simatic_s7-400pn_v6_firmware6.0.6 or later
- siemens simatic_s7-400h_v6_firmware6.0.8 or later
- siemens simatic_s7-1500_firmware2.0 or later
- siemens ek-ertec_200p_firmware4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_s7-200_firmware | v < 2.03.01 | 2.03.01 |
| siemens simatic_s7-400pn_v6_firmware | v < 6.0.6 | 6.0.6 |
| siemens simatic_s7-400h_v6_firmware | v < 6.0.8 | 6.0.8 |
| siemens simatic_s7-400pn\/dp_v7_firmware | No range specified | — |
| siemens simatic_s7-410_v8_firmware | No range specified | — |
| siemens simatic_s7-300_firmware | No range specified | — |
| siemens simatic_s7-1200_firmware | No range specified | — |
| siemens simatic_s7-1500_firmware | v < 2.0 | 2.0 |
| siemens simatic_s7-1500_controller_firmware | 2.0 | — |
| siemens simatic_winac_rtx_f_2010_firmware | No range specified | — |
| siemens simatic_et_200al_firmware | No range specified | — |
| siemens simatic_et_200ecopn_firmware | No range specified | — |
| siemens simatic_et_200m_firmware | No range specified | — |
| siemens simatic_et_200mp_firmware | No range specified | — |
| siemens simatic_et_200pro_firmware | No range specified | — |
| siemens simatic_et_200s_firmware | No range specified | — |
| siemens simatic_et_200sp_firmware | No range specified | — |
| siemens dk_standard_ethernet_controller_firmware | No range specified | — |
| siemens ek-ertec_200p_firmware | v < 4.5 | 4.5 |
| siemens ek-ertec_200pn_io_firmware | No range specified | — |
| siemens simotion_d_firmware | v ≤ 5.1 | — |
| siemens simotion_c_firmware | v ≤ 5.1 | — |
| siemens simotion_p_firmware | v ≤ 5.1 | — |
| siemens sinamics_dcm_firmware | No range specified | — |
| siemens sinamics_dcp_firmware | No range specified | — |
| siemens sinamics_g110m\/g120pn_firmware | v ≤ 4.7 | — |
| siemens sinamics_g130_firmware | No range specified | — |
| siemens sinamics_g150_firmware | No range specified | — |
| siemens sinamics_s110pn_firmware | No range specified | — |
| siemens sinamics_s120_firmware | No range specified | — |
| siemens sinamics_s150_v4.7_firmware | No range specified | — |
| siemens sinamics_s150_v4.8_firmware | No range specified | — |
| siemens sinamics_v90pn_firmware | No range specified | — |
| siemens sinumerik_840d_sl_firmware | No range specified | — |
| siemens simatic_compact_field_unit_firmware | No range specified | — |
| siemens simatic_pn\/pn_coupler_firmware | No range specified | — |
| siemens simocode_pro_v_profinet_firmware | No range specified | — |
| siemens sirius_soft_starter_3rw44pn_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.