CVE-2017-2681

published 2017-05-11

CVE-2017-2681: Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that…

high 7.1 CVSS 4.0

AV A AC L AT N PR N UI N VC N VI N VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Affected

196 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	development_evaluation_kits_for_profinet_io_dk_standard_ethernet_controller	—	—
siemens	development_evaluation_kits_for_profinet_io_ek-ertec_200	—	—
siemens	development_evaluation_kits_for_profinet_io_ek-ertec_200p	—	—
siemens	dk_standard_ethernet_controller_firmware	< 4.1.1	4.1.1
siemens	dk_standard_ethernet_controller_firmware	—	—
siemens	ek-ertec_200_pn_io_firmware	< 4.2.1	4.2.1
siemens	ek-ertec_200_pn_io_firmware	—	—
siemens	ek-ertec_200p_pn_io_firmware	< 4.4.0	4.4.0
siemens	ek-ertec_200p_pn_io_firmware	—	—
siemens	ie_as-i_link_pn_io	—	—
siemens	ie_pb-link	—	—
siemens	ie_pb-link_firmware	< 3.0	3.0
siemens	pn_pn_coupler_firmware	< 4.0	4.0
siemens	scalance_m-800_firmware	< 4.03	4.03
siemens	scalance_s615_firmware	< 4.03	4.03
siemens	scalance_w-700_ieee_802.11n_family	—	—
siemens	scalance_w700_firmware	< 6.1	6.1
siemens	scalance_x-200_family	—	—
siemens	scalance_x-200irt_family	—	—
siemens	scalance_x-300_family	—	—
siemens	scalance_x200_firmware	< 5.2.2	5.2.2
siemens	scalance_x200_irt_firmware	< 5.4.0	5.4.0
siemens	scalance_x300_firmware	< 4.1.0	4.1.0
siemens	scalance_x408_family	—	—
siemens	scalance_x408_firmware	< 4.1.0	4.1.0

CWE-400