Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
None
Attack Vector
Adjacent_network
0

CVE-2017-2681

Disclosure Date: May 11, 2017 •
CVE-2017-2681 CVSS v3 Base Score: 6.5
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
6.5 Medium
Impact Score:
3.6
Exploitability Score:
2.8
Vector:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector (AV):
Adjacent_network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller All versions < V4.1.1 Patch04
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 All versions < V4.2.1 Patch03
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P All versions < V4.4.0 Patch01
IE/AS-i Link PN IO All versions
IE/PB-Link (incl. SIPLUS NET variants) All versions < V3.0
SCALANCE M-800 family (incl. S615, MUM-800 and RM1224) All versions < V4.03
SCALANCE W-700 IEEE 802.11n family All versions < V6.1
SCALANCE X-200 family (incl. SIPLUS NET variants) All versions < V5.2.2
SCALANCE X-200IRT family (incl. SIPLUS NET variants) All versions < V5.4.0
SCALANCE X-300 family (incl. X408 and SIPLUS NET variants) All versions < V4.1.0
SCALANCE X408 family All versions < V4.1.0
SCALANCE X414 All versions < V3.10.2
SCALANCE XM-400 family All versions < V6.1
SCALANCE XR-500 family All versions < V6.1
SIMATIC CM 1542-1 All versions < V2.0
SIMATIC CM 1542SP-1 All versions < V1.0.15
SIMATIC CP 1243-1 (incl. SIPLUS variants) All versions < V2.1.82
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) *
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) All versions
SIMATIC CP 1243-8 IRC All versions < V2.1.82
SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants) All versions < V1.0.15
SIMATIC CP 1543-1 (incl. SIPLUS variants) All versions < V2.1
SIMATIC CP 1543SP-1 (incl. SIPLUS variants) All versions < V1.0.15
SIMATIC CP 1604 All versions < V2.7
SIMATIC CP 1616 All versions < V2.7
SIMATIC CP 343-1 (incl. SIPLUS variants) All versions < V3.1.3
SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) All versions
SIMATIC CP 343-1 Lean (incl. SIPLUS variants) All versions < V3.1.3
SIMATIC CP 443-1 (incl. SIPLUS variants) All versions < V3.2.17
SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) All versions < V3.2.17
SIMATIC CP 443-1 OPC UA All versions
SIMATIC DK-16xx PN IO All versions < V2.7
SIMATIC ET 200AL IM 157-1 PN V1.0.2
SIMATIC ET 200M (incl. SIPLUS variants) All versions
SIMATIC ET 200MP IM 155-5 PN BA V4.0.1
SIMATIC ET 200MP IM 155-5 PN HF V4.2.0
SIMATIC ET 200MP IM 155-5 PN ST V4.1.0
SIMATIC ET 200pro IM 154-3 PN HF *
SIMATIC ET 200pro IM 154-4 PN HF *
SIMATIC ET 200SP IM 155-6 PN BA *
SIMATIC ET 200SP IM 155-6 PN HF V4.2.0
SIMATIC ET 200SP IM 155-6 PN HS V4.0.1
SIMATIC ET 200SP IM 155-6 PN ST V4.1.0
SIMATIC ET 200SP IM 155-6 PN ST BA V4.1.0
SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 All versions
SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 All versions
SIMATIC ET200ecoPN, 4AO U/I 4xM12 All versions
SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 All versions
SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 All versions
SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 All versions
SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 All versions
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 All versions
SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 All versions
SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 All versions
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 All versions
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 All versions
SIMATIC ET200ecoPN: IO-Link Master All versions
SIMATIC ET200S (incl. SIPLUS variants) All versions
SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants) All versions < V15.1
SIMATIC MV420 SR-B V7.0.6
SIMATIC MV420 SR-B Body V7.0.6
SIMATIC MV420 SR-P V7.0.6
SIMATIC MV420 SR-P Body V7.0.6
SIMATIC MV440 HR V7.0.6
SIMATIC MV440 SR V7.0.6
SIMATIC MV440 UR V7.0.6
SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) All versions < V4.0
SIMATIC RF650R All versions < V3.0
SIMATIC RF680R All versions < V3.0
SIMATIC RF685R All versions < V3.0
SIMATIC S7-1200 CPU family (incl. SIPLUS variants) All versions < V4.2.1
SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) All versions < V2.1
SIMATIC S7-1500 Software Controller All versions < V2.1
SIMATIC S7-200 SMART All versions < V2.3
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) V3.X.14
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) V6.0.7
SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) V6.0.6
SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) V7.0.2
SIMATIC S7-410 CPU family (incl. SIPLUS variants) All versions < V8.2
SIMATIC TDC CP51M1 V1.1.8
SIMATIC TDC CPU555 V1.1.1
SIMATIC Teleservice Adapter IE Advanced All versions
SIMATIC Teleservice Adapter IE Basic All versions
SIMATIC Teleservice Adapter IE Standard All versions
SIMATIC WinAC RTX 2010 All versions < V2010 SP3
SIMATIC WinAC RTX F 2010 All versions < V2010 SP3
SIMOCODE pro V PROFINET (incl. SIPLUS variants) All versions < V2.0.0
SIMOTION All versions < V4.5 HF1
SINAMICS DCM w. PN All versions < V1.4 SP1 HF5
SINAMICS DCP w. PN All versions < V1.2 HF1
SINAMICS G110M w. PN All versions < V4.7 SP6 HF3
SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants) All versions < V4.7 SP6 HF3
SINAMICS G130 V4.7 w. PN All versions < V4.7 HF27
SINAMICS G130 V4.8 w. PN All versions < V4.8 HF4
SINAMICS G150 V4.7 w. PN V4.7: All versions < V4.7 HF27
SINAMICS G150 V4.8 w. PN All versions < V4.8 HF4
SINAMICS S110 w. PN All versions < V4.4 SP3 HF5
SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants) All versions < V4.7
SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants) All versions
SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants) All versions < V4.7 HF27
SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants) All versions < V4.8 HF4
SINAMICS S150 V4.7 w. PN All versions < V4.7 HF27
SINAMICS S150 V4.8 w. PN All versions < V4.8 HF4
SINAMICS V90 w. PN All versions < V1.01
SINUMERIK 828D V4.5 and prior All versions < V4.5 SP6 HF2
SINUMERIK 828D V4.7 All versions < V4.7 SP4 HF1
SINUMERIK 840D sl V4.5 and prior All versions < V4.5 SP6 HF2
SINUMERIK 840D sl V4.7 All versions < V4.7 SP4 HF1
SIPLUS ET 200MP IM 155-5 PN HF V4.2.0
SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL V4.2.0
SIPLUS ET 200MP IM 155-5 PN ST V4.1.0
SIPLUS ET 200MP IM 155-5 PN ST TX RAIL V4.1.0
SIPLUS ET 200SP IM 155-6 PN HF V4.2.0
SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL V4.2.0
SIPLUS ET 200SP IM 155-6 PN ST V4.1.0
SIPLUS ET 200SP IM 155-6 PN ST BA V4.1.0
SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL V4.1.0
SIPLUS ET 200SP IM 155-6 PN ST TX RAIL V4.1.0
SIRIUS ACT 3SU1 interface module PROFINET All versions < V1.1.0
SIRIUS Motor Starter M200D PROFINET All versions
SIRIUS Soft Starter 3RW44 PN All versions
SITOP PSU8600 PROFINET All versions < V1.2.0
SITOP UPS1600 PROFINET (incl. SIPLUS variants) All versions < V2.2.0
Softnet PROFINET IO for PC-based Windows systems All versions < V14 SP1
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

Products

Technical Analysis