CVE-2017-12741 json
Specially crafted packets sent to port 161/udp could cause a denial of service condition.
published 2017-12-26 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-4280
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.3%
- EPSS 3.3% chance of exploitation in 30 days, percentile 88%
- public exploits
- 0
- none known
Summary
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
Patch / fix
- Siemens SIMATIC ET 200AL IM 157-1 PN V1.0.2
- Siemens SIMATIC ET 200MP IM 155-5 PN BA V4.0.2
- Siemens SIMATIC ET 200MP IM 155-5 PN HF V4.2.0
- Siemens SIMATIC ET 200MP IM 155-5 PN ST V4.1.0
- Siemens SIMATIC ET 200SP IM 155-6 PN HF V4.2.0
- Siemens SIMATIC ET 200SP IM 155-6 PN HS V4.0.1
- Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) V3.X.16
- Siemens SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants) V6.0.8
- Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) V6.0.6
- Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) V7.0.2
- Siemens SIMATIC TDC CP51M1 V1.1.8
- Siemens SIMATIC TDC CPU555 V1.1.1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-17-339-01 updated cvss 7.5
Siemens Industrial Products (Update S)
-
Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller <V4.1.1_Patch_05affected: fixed in V4.1.1, mitigation support.industry.siemens.com
-
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 <V4.5affected: fixed in V4.5, mitigation support.industry.siemens.com
-
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P <V4.5affected: fixed in V4.5, mitigation support.industry.siemens.com
-
Siemens SIMATIC Compact Field Unitaffected: mitigation, no fix available
-
Siemens SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) <V1.0.2affected: fixed in V1.0.2, mitigation
-
Siemens SIMATIC ET 200M (incl. SIPLUS variants)affected: mitigation, no fix planned
-
Siemens SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0) <V4.0.2affected: fixed in V4.0.2, mitigation
-
Siemens SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) <V4.2.0affected: fixed in V4.2.0, mitigation
show 13 moreshow fewer
-
Siemens SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) <V4.1.0affected: fixed in V4.1.0, mitigation
-
Siemens SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Siemens SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Siemens SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0)affected: mitigation, no fix planned
-
Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) <V1.1.0affected: fixed in V1.1.0, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) <V4.2.0affected: fixed in V4.2.0, mitigation
-
Siemens SIMATIC ET 200SP IM 155-6 PN HS (6ES7155-6AU00-0DN0) <V4.0.1affected: fixed in V4.0.1, mitigation
-
Siemens SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU01-0BN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA01-0BN0) Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12 (6ES7145-6HD00-0AB0) Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 (6ES7147-6BG00-0AB0)affected: mitigation, no fix planned
+12 more productsfewer
Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 (6ES7142-6BR00-0AB0) Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 (6ES7144-6KD50-0AB0) Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 (6ES7144-6KD00-0AB0) Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 (6ES7141-6BF00-0AB0) Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 (6ES7141-6BG00-0AB0) Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 (6ES7142-6BF50-0AB0) Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 (6ES7142-6BF00-0AB0) Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 (6ES7142-6BG00-0AB0) Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 (6ES7141-6BH00-0AB0) Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 (6ES7142-6BH00-0AB0) Siemens SIMATIC ET200ecoPN: IO-Link Master (6ES7148-6JA00-0AB0) Siemens SIMATIC ET200S (incl. SIPLUS variants) -
Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) <V4.2.0affected: fixed in V4.2.0, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-200 SMART <V2.03.01affected: fixed in V2.03.01, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) <V3.X.16affected: fixed in V3.X.16, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants) <V6.0.8affected: fixed in V6.0.8, mitigation
-
Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) <V6.0.6affected: fixed in V6.0.6, mitigation
-
Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) <V7.0.2affected: fixed in V7.0.2, mitigation
-
Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) <V8.2.1affected: fixed in V8.2.1, mitigation support.industry.siemens.com
46 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-18-128-01 updated cvss 7.5
Siemens Medium Voltage SINAMICS Products (Update A)
-
Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants) <V4.4_HF26affected: fixed in V4.4, mitigation
-
Siemens SINAMICS GH150 V4.7 w. PROFINET <V4.7_SP5_HF7affected: fixed in V4.7, mitigation
-
Siemens SINAMICS GL150 V4.7 w. PROFINET <V4.8_SP2affected: fixed in V4.8, mitigation
-
Siemens SINAMICS GM150 V4.7 w. PROFINET <V4.7_HF31 Siemens SINAMICS SL150 V4.7.0 w. PROFINET <V4.7_HF30affected: fixed in V4.7, mitigation
-
Siemens SINAMICS SL150 V4.7.4 w. PROFINET <V4.8_SP2 Siemens SINAMICS SL150 V4.7.5 w. PROFINET <V4.8_SP2 Siemens SINAMICS SM120 V4.7 w. PROFINET <V4.8_SP2affected: fixed in V4.8, mitigation
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-19-099-01 updated cvss 7.5
Siemens SIMOCODE pro V EIP
-
Siemens SIMOCODE pro V EIP (incl. SIPLUS variants) <V1.0.2affected: fixed in V1.0.2, mitigation
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
Exploit prediction
3.31% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Affected products
- Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
- Siemens SIMATIC Compact Field Unit
- Siemens SIMATIC ET 200AL IM 157-1 PN
- Siemens SIMATIC ET 200M (incl. SIPLUS variants)
- Siemens SIMATIC ET 200MP IM 155-5 PN BA
- Siemens SIMATIC ET 200MP IM 155-5 PN HF
- Siemens SIMATIC ET 200MP IM 155-5 PN ST
- Siemens SIMATIC ET 200pro IM 154-3 PN HF
- Siemens SIMATIC ET 200pro IM 154-4 PN HF
- Siemens SIMATIC ET 200SP IM 155-6 PN BA
- Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
- Siemens SIMATIC ET 200SP IM 155-6 PN HF
- Siemens SIMATIC ET 200SP IM 155-6 PN HS
- Siemens SIMATIC ET 200SP IM 155-6 PN ST
- Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
- Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
- Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
- Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12
- Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
- Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
- Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
- Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
- Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
- Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
- Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
- Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
- Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
- Siemens SIMATIC ET200ecoPN: IO-Link Master
- Siemens SIMATIC ET200S (incl. SIPLUS variants)
- Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
- Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- Siemens SIMATIC S7-1500 Software Controller
- Siemens SIMATIC S7-200 SMART
- Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- Siemens SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)
- Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
- Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
- Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
- Siemens SIMATIC TDC CP51M1
- Siemens SIMATIC TDC CPU555
- Siemens SIMATIC WinAC RTX 2010
- Siemens SIMATIC WinAC RTX F 2010
- Siemens SIMOCODE pro V PROFINET (incl. SIPLUS variants)
- Siemens SIMOTION C
- Siemens SIMOTION D
- Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
- Siemens SIMOTION P V4.4 and V4.5
Classification
- Weakness
-
- CWE-400 Uncontrolled Resource Consumption
References
-
securityfocus.com
/bid/101964
vdb-entry
- cert-portal.siemens.com /productcert/pdf/ssa-546832.pdf
- cert-portal.siemens.com /productcert/pdf/ssa-346262.pdf
- cert-portal.siemens.com /productcert/pdf/ssa-141614.pdf
- cert-portal.siemens.com /productcert/html/ssa-346262.html
- cert-portal.siemens.com /productcert/html/ssa-546832.html
- cert-portal.siemens.com /productcert/html/ssa-141614.html
Sources
- CVE List CVE-2017-12741
- NVD CVE-2017-12741
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.