CVE-2017-9945
Medium
Description
In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover.
SeverityMedium
CVSS6.5
Exploit probability—
ProductSiemens 7km Pac Switched Ethernet Profinet Expansion Module Firmware
PublishedAug 30, 2017
First seenAug 30, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens 7km_pac_switched_ethernet_profinet_expansion_module_firmware | v ≤ 2.1.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.