CVE-2017-2680 json
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment…
published 2017-05-11 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-11823
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 67%
- public exploits
- 0
- none known
Summary
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
Patch / fix
- Siemens SIMATIC ET 200AL IM 157-1 PN V1.0.2
- Siemens SIMATIC ET 200MP IM 155-5 PN BA V4.0.1
- Siemens SIMATIC ET 200MP IM 155-5 PN HF V4.2.0
- Siemens SIMATIC ET 200MP IM 155-5 PN ST V4.1.0
- Siemens SIMATIC ET 200SP IM 155-6 PN HF V4.2.0
- Siemens SIMATIC ET 200SP IM 155-6 PN HS V4.0.1
- Siemens SIMATIC ET 200SP IM 155-6 PN ST V4.1.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-17-129-02 updated cvss 6.5
Siemens PROFINET DCP (Update V)
-
Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller <V4.1.1_Patch04affected: fixed in V4.1.1, mitigation support.industry.siemens.com
-
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 <V4.2.1_Patch03affected: fixed in V4.2.1, mitigation support.industry.siemens.com
-
Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P <V4.4.0_Patch01affected: fixed in V4.4.0, mitigation support.industry.siemens.com
-
Siemens IE/AS-i Link PN IOaffected: mitigation, no fix planned
-
Siemens IE/PB-Link (incl. SIPLUS NET variants) < V3.0affected: fixed in V3.0, mitigation support.industry.siemens.com
-
Siemens SCALANCE M-800 family (incl. S615, MUM-800 and RM1224) < V4.03affected: fixed in V5.00, mitigation support.industry.siemens.com
-
Siemens SCALANCE W-700 IEEE 802.11n family < V6.1affected: fixed in V6.3.1, mitigation support.industry.siemens.com
-
Siemens SCALANCE X-200 family (incl. SIPLUS NET variants) < V5.2.2affected: fixed in V5.2.2, mitigation support.industry.siemens.com
show 26 moreshow fewer
-
Siemens SCALANCE X-200IRT family (incl. SIPLUS NET variants) < V5.4.0affected: fixed in V5.4.0, mitigation support.industry.siemens.com
-
Siemens SCALANCE X-300 family (incl. X408 and SIPLUS NET variants) < V4.1.0 Siemens SCALANCE X408 family < V4.1.0affected: fixed in V4.1.2, mitigation support.industry.siemens.com
-
Siemens SCALANCE X414 < V3.10.2affected: fixed in V3.10.2, mitigation support.industry.siemens.com
-
Siemens SCALANCE XM-400 family < V6.1affected: fixed in V6.2, mitigation support.industry.siemens.com
-
Siemens SCALANCE XR-500 family < V6.1affected: fixed in V6.2, mitigation support.industry.siemens.com
-
Siemens SIMATIC CM 1542-1 < V2.0affected: fixed in V2.0, mitigation support.industry.siemens.com
-
Siemens SIMATIC CM 1542SP-1 < V1.0.15affected: fixed in V1.0.15, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 343-1 (incl. SIPLUS variants) < V3.1.3affected: fixed in V3.1.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)affected: mitigation, no fix planned
-
Siemens SIMATIC CP 343-1 Lean (incl. SIPLUS variants) < V3.1.3affected: fixed in V3.1.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 443-1 (incl. SIPLUS variants) < V3.2.17affected: fixed in V3.2.17, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) < V3.2.17affected: fixed in V3.2.17, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 443-1 OPC UA (6GK7443-1UX00-0XE0)affected: mitigation, no fix planned
-
Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) < V2.1.82affected: fixed in V3.1, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)affected: mitigation, no fix planned
-
Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) < V2.1.82affected: fixed in V3.1, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants) < V1.0.15affected: fixed in V1.0.15, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1543-1 (incl. SIPLUS variants) < V2.1affected: fixed in V2.1, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1543SP-1 (incl. SIPLUS variants) < V1.0.15affected: fixed in V1.0.15, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1604 (6GK1160-4AA01) < V2.7 Siemens SIMATIC CP 1616 (6GK1161-6AA02) < V2.7 Siemens SIMATIC DK-16xx PN IO < V2.7affected: fixed in V2.8.0, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) < V1.0.2affected: fixed in V1.0.2, mitigation
-
Siemens SIMATIC ET 200M (incl. SIPLUS variants)affected: mitigation, no fix planned
-
Siemens SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0) < V4.0.1affected: fixed in V4.0.1, mitigation
-
Siemens SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) < V4.2.0affected: fixed in V4.2.0, mitigation
-
Siemens SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) < V4.1.0affected: fixed in V4.1.0, mitigation
-
Siemens SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Siemens SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Siemens SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0)affected: mitigation, no fix planned
86 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-18-128-01 updated cvss 6.5
Siemens Medium Voltage SINAMICS Products (Update A)
-
Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants) <V4.4_HF26affected: fixed in V4.4, mitigation
-
Siemens SINAMICS GH150 V4.7 w. PROFINET <V4.7_SP5_HF7affected: fixed in V4.7, mitigation
-
Siemens SINAMICS GL150 V4.7 w. PROFINET <V4.8_SP2affected: fixed in V4.8, mitigation
-
Siemens SINAMICS GM150 V4.7 w. PROFINET <V4.7_HF31 Siemens SINAMICS SL150 V4.7.0 w. PROFINET <V4.7_HF30affected: fixed in V4.7, mitigation
-
Siemens SINAMICS SL150 V4.7.4 w. PROFINET <V4.8_SP2 Siemens SINAMICS SL150 V4.7.5 w. PROFINET <V4.8_SP2 Siemens SINAMICS SM120 V4.7 w. PROFINET <V4.8_SP2affected: fixed in V4.8, mitigation
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-18-023-02 updated cvss 6.5
ICSA-18-023-02 Siemens Industrial Products (Update A)
-
Siemens Extension Unit 12" PROFINET <V01.01.01 Siemens Extension Unit 15" PROFINET <V01.01.01 Siemens Extension Unit 19" PROFINET <V01.01.01 Siemens Extension Unit 22" PROFINET <V01.01.01affected: fixed in V01.01.01, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1242-7 GPRS V2 <V2.1.82 Siemens SIMATIC CP 1243-7 LTE/US <V2.1.82 Siemens SIMATIC CP 1243-8 <V2.1.82affected: fixed in V2.1.82, mitigation support.industry.siemens.com
-
Siemens SIMATIC CP 1626 <V1.1affected: fixed in V1.1, mitigation support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
1.15% chance of exploitation in the next 30 days, higher than 67% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 7.1 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 6.1 | AV:A/AC:L/Au:N/C:N/I:N/A:C |
Affected products
- Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
- Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
- Siemens Extension Unit 12" PROFINET
- Siemens Extension Unit 15" PROFINET
- Siemens Extension Unit 19" PROFINET
- Siemens Extension Unit 22" PROFINET
- Siemens IE/AS-i Link PN IO
- Siemens IE/PB-Link (incl. SIPLUS NET variants)
- Siemens SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)
- Siemens SCALANCE W-700 IEEE 802.11n family
- Siemens SCALANCE X-200 family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-200IRT family (incl. SIPLUS NET variants)
- Siemens SCALANCE X-300 family (incl. X408 and SIPLUS NET variants)
- Siemens SCALANCE X408 family
- Siemens SCALANCE X414
- Siemens SCALANCE XM-400 family
- Siemens SCALANCE XR-500 family
- Siemens SIMATIC CM 1542-1
- Siemens SIMATIC CM 1542SP-1
- Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
- Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants)
- Siemens SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
- Siemens SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
- Siemens SIMATIC CP 1243-7 LTE US
- Siemens SIMATIC CP 1243-8 IRC
- Siemens SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)
- Siemens SIMATIC CP 1543-1 (incl. SIPLUS variants)
- Siemens SIMATIC CP 1543SP-1 (incl. SIPLUS variants)
- Siemens SIMATIC CP 1604
- Siemens SIMATIC CP 1616
- Siemens SIMATIC CP 1626
- Siemens SIMATIC CP 343-1 (incl. SIPLUS variants)
- Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
- Siemens SIMATIC CP 343-1 Lean (incl. SIPLUS variants)
- Siemens SIMATIC CP 443-1 (incl. SIPLUS variants)
- Siemens SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
- Siemens SIMATIC CP 443-1 OPC UA
- Siemens SIMATIC DK-16xx PN IO
- Siemens SIMATIC ET 200AL IM 157-1 PN
- Siemens SIMATIC ET 200M (incl. SIPLUS variants)
- Siemens SIMATIC ET 200MP IM 155-5 PN BA
- Siemens SIMATIC ET 200MP IM 155-5 PN HF
- Siemens SIMATIC ET 200MP IM 155-5 PN ST
- Siemens SIMATIC ET 200pro IM 154-3 PN HF
- Siemens SIMATIC ET 200pro IM 154-4 PN HF
- Siemens SIMATIC ET 200SP IM 155-6 PN BA
- Siemens SIMATIC ET 200SP IM 155-6 PN HF
- Siemens SIMATIC ET 200SP IM 155-6 PN HS
- Siemens SIMATIC ET 200SP IM 155-6 PN ST
Classification
- Weakness
-
- CWE-400 Uncontrolled Resource Consumption
References
-
cert-portal.siemens.com
/productcert/pdf/ssa-546832.pdf
vendor-advisory
-
cert-portal.siemens.com
/productcert/pdf/ssa-293562.pdf
vendor-advisory
-
cert-portal.siemens.com
/productcert/pdf/ssa-284673.pdf
vendor-advisory
-
securitytracker.com
/id/1038463
vdb-entry, third-party-advisory
-
securityfocus.com
/bid/98369
vdb-entry, third-party-advisory
-
ics-cert.us-cert.gov
/advisories/ICSA-18-023-02
third-party-advisory, us-government-resource
-
siemens.com
/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf
broken-link
- cert-portal.siemens.com /productcert/html/ssa-293562.html
- cert-portal.siemens.com /productcert/html/ssa-284673.html
- cert-portal.siemens.com /productcert/html/ssa-546832.html
Sources
- CVE List CVE-2017-2680
- NVD CVE-2017-2680
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.