CVE-2017-2680
Medium
Description
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
SeverityMedium
CVSS6.5
Exploit probability—
ProductSiemens Simatic Cp 343-1 Std Firmware
PublishedMay 11, 2017
First seenMay 11, 2017
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- siemens simatic_cp_343-1_std_firmware3.1.3 or later
- siemens simatic_cp_343-1_lean_firmware3.1.3 or later
- siemens simatic_cp_443-1_std_firmware3.2.17 or later
- siemens simatic_cp_443-1_adv_firmware3.2.17 or later
- siemens simatic_cp_1243-1_firmware2.1.82 or later
- siemens simatic_cm_1542-1_firmware2.0 or later
- siemens simatic_cp_1542sp-1_firmware1.0.15 or later
- siemens simatic_cp_1542sp-1_irc_firmware1.0.15 or later
- siemens simatic_cp_1543sp-1_firmware1.0.15 or later
- siemens simatic_cp_1543-1_firmware2.1 or later
- siemens simatic_rf650r_firmware3.0 or later
- siemens simatic_rf680r_firmware3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_cp_343-1_std_firmware | v < 3.1.3 | 3.1.3 |
| siemens simatic_cp_343-1_lean_firmware | v < 3.1.3 | 3.1.3 |
| siemens simatic_cp_343-1_adv_firmware | No range specified | — |
| siemens simatic_cp_443-1_std_firmware | v < 3.2.17 | 3.2.17 |
| siemens simatic_cp_443-1_adv_firmware | v < 3.2.17 | 3.2.17 |
| siemens simatic_cp_443-1_opc-ua_firmware | No range specified | — |
| siemens simatic_cp_1243-1_firmware | v < 2.1.82 | 2.1.82 |
| siemens simatic_cm_1542-1_firmware | v < 2.0 | 2.0 |
| siemens simatic_cp_1542sp-1_firmware | v < 1.0.15 | 1.0.15 |
| siemens simatic_cp_1542sp-1_irc_firmware | v < 1.0.15 | 1.0.15 |
| siemens simatic_cp_1543sp-1_firmware | v < 1.0.15 | 1.0.15 |
| siemens simatic_cp_1543-1_firmware | v < 2.1 | 2.1 |
| siemens simatic_rf650r_firmware | v < 3.0 | 3.0 |
| siemens simatic_rf680r_firmware | v < 3.0 | 3.0 |
| siemens simatic_rf685r_firmware | v < 3.0 | 3.0 |
| siemens simatic_cp_1616_firmware | v < 2.7 | 2.7 |
| siemens simatic_cp_1604_firmware | v < 2.7 | 2.7 |
| siemens simatic_dk-1616_pn_io_firmware | v < 2.7 | 2.7 |
| siemens scalance_x200_firmware | v < 5.2.2 | 5.2.2 |
| siemens scalance_x200_irt_firmware | v < 5.4.0 | 5.4.0 |
| siemens scalance_x300_firmware | v < 4.1.0 | 4.1.0 |
| siemens scalance_x408_firmware | v < 4.1.0 | 4.1.0 |
| siemens scalance_x414_firmware | v < 3.10.2 | 3.10.2 |
| siemens scalance_xm400_firmware | v < 6.1 | 6.1 |
| siemens scalance_xr500_firmware | v < 6.1 | 6.1 |
| siemens scalance_w700_firmware | v < 6.1 | 6.1 |
| siemens scalance_m-800_firmware | v < 4.03 | 4.03 |
| siemens scalance_s615_firmware | v < 4.03 | 4.03 |
| siemens softnet_profinet_io_firmware | v < 14, 14 | 14 |
| siemens ie\/pb-link_firmware | v < 3.0 | 3.0 |
| siemens ie\/as-i_link_pn_io_firmware | No range specified | — |
| siemens simatic_teleservice_adapter_ie_standard_firmware | No range specified | — |
| siemens simatic_teleservice_adapter_ie_basic_firmware | No range specified | — |
| siemens simatic_teleservice_adapter_ie_advanced_firmware | No range specified | — |
| siemens sitop_psu8600_firmware | v < 1.2.0 | 1.2.0 |
| siemens ups1600_profinet_firmware | v < 2.2.0 | 2.2.0 |
| siemens simatic_et_200al_firmware | v < 1.0.2 | 1.0.2 |
| siemens simatic_et_200ecopn_firmware | No range specified | — |
| siemens simatic_et_200m_firmware | No range specified | — |
| siemens simatic_et_200mp_firmware | v < 4.0.1 | 4.0.1 |
| siemens simatic_et_200pro_firmware | No range specified | — |
| siemens simatic_et_200s_firmware | No range specified | — |
| siemens simatic_et_200sp_firmware | v < 4.1.0 | 4.1.0 |
| siemens pn\/pn_coupler_firmware | v < 4.0 | 4.0 |
| siemens dk_standard_ethernet_controller_firmware | v < 4.1.1, 4.1.1 | 4.1.1 |
| siemens ek-ertec_200p_pn_io_firmware | v < 4.4.0, 4.4.0 | 4.4.0 |
| siemens ek-ertec_200_pn_io_firmware | v < 4.2.1, 4.2.1 | 4.2.1 |
| siemens simatic_s7-200_smart_firmware | v < 2.3 | 2.3 |
| siemens simatic_s7-300_firmware | No range specified | — |
| siemens simatic_s7-400_firmware | v < 6.0.6 | 6.0.6 |
| siemens simatic_s7-1200_firmware | v < 4.2.1 | 4.2.1 |
| siemens simatic_s7-1500_firmware | v < 2.1 | 2.1 |
| siemens simatic_s7-1500_software_controller_firmware | v < 2.1 | 2.1 |
| siemens simatic_winac_rtx_firmware | v < 2010, 2010 | 2010 |
| siemens sirius_act_3su1_firmware | v < 1.1.0 | 1.1.0 |
| siemens sirius_soft_starter_3rw44_pn_firmware | No range specified | — |
| siemens sirius_motor_starter_m200d_profinet_firmware | No range specified | — |
| siemens simocode_pro_v_profinet_firmware | v < 2.0.0 | 2.0.0 |
| siemens sinamics_dcm_firmware | v < 1.4, 1.4 | 1.4 |
| siemens sinamics_dcp_firmware | v < 1.2, 1.2 | 1.2 |
| siemens sinamics_g110m_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_g120\(c\/p\/d\)_w._pn_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_g130_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_g150_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics__s110_pn_firmware | v < 4.4, 4.4 | 4.4 |
| siemens sinamics_s120_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_s150_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_v90_pn_firmware | v < 1.01 | 1.01 |
| siemens simotion_firmware | v < 4.5, 4.5 | 4.5 |
| siemens sinumerik_828d_firmware | v < 4.5, 4.5 | 4.5 |
| siemens sinumerik_840d_sl_firmware | v < 4.5, 4.5 | 4.5 |
| siemens simatic_hmi_comfort_panels | v < 15.1 | 15.1 |
| siemens simatic_hmi_multi_panels | v < 15.1 | 15.1 |
| siemens simatic_hmi_mobile_panels | v < 15.1 | 15.1 |
| siemens simatic_cp_1243-1_irc_firmware | v < 2.1.82 | 2.1.82 |
| siemens simatic_cp_1243-1_iec_firmware | No range specified | — |
| siemens simatic_cp_1243-1_dnp3_firmware | No range specified | — |
| siemens simatic_dk-1604_pn_io_firmware | v < 2.7 | 2.7 |
| siemens simatic_tdc_cpu555_firmware | v < 1.1.1 | 1.1.1 |
| siemens simatic_tdc_cp51m1_firmware | v < 1.1.8 | 1.1.8 |
| siemens sinamics_gh150_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_gl150_firmware | v < 4.8, 4.8 | 4.8 |
| siemens sinamics_gm150_firmware | v < 4.7, 4.7 | 4.7 |
| siemens sinamics_sl150_firmware | v < 4.8, 4.8 | 4.8 |
| siemens sinamics_sm120_firmware | v < 4.8, 4.8 | 4.8 |
| siemens extension_unit_12_profinet_firmware | v < 01.01.01 | 01.01.01 |
| siemens extension_unit_15_profinet_firmware | v < 01.01.01 | 01.01.01 |
| siemens extension_unit_19_profinet_firmware | v < 01.01.01 | 01.01.01 |
| siemens extension_unit_22_profinet_firmware | v < 01.01.01 | 01.01.01 |
| siemens simatic_cp_1242-7_gprs_firmware | v < 2.1.82 | 2.1.82 |
| siemens simatic_cp_1243-7_lte\/us_firmware | v < 2.1.82 | 2.1.82 |
| siemens simatic_cp_1243-8_firmware | v < 2.1.82 | 2.1.82 |
| siemens simatic_cp_1626_firmware | v < 1.1 | 1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.