CVE-2017-12741 vulnerability in Siemens Products
Published on December 26, 2017

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

NVD

Weakness Type

What is a Resource Exhaustion Vulnerability?

The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CVE-2017-12741 has been classified to as a Resource Exhaustion vulnerability or weakness.

Products Associated with CVE-2017-12741

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2017-12741 are published in these products:

Siemens Simatic S7 1500 Software Controller

Siemens Simatic Winac Rtx F 2010

Siemens Sinumerik 840d Sl

Affected Versions

Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller:

Version All versions < V4.1.1 Patch 05 is affected.

Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200:

Version All versions < V4.5 is affected.

Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P:

Version All versions < V4.5 is affected.

Siemens SIMATIC Compact Field Unit:

Version All versions is affected.

Siemens SIMATIC ET 200AL IM 157-1 PN:

Before V1.0.2 is affected.

Siemens SIMATIC ET 200M (incl. SIPLUS variants):

Version All versions is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN BA:

Before V4.0.2 is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN HF:

Before V4.2.0 is affected.

Siemens SIMATIC ET 200MP IM 155-5 PN ST:

Before V4.1.0 is affected.

Siemens SIMATIC ET 200pro IM 154-3 PN HF:

Before * is affected.

Siemens SIMATIC ET 200pro IM 154-4 PN HF:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN BA:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants):

Version All versions < V1.1.0 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN HF:

Before V4.2.0 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN HS:

Before V4.0.1 is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIMATIC ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12:

Version All versions is affected.

Siemens SIMATIC ET200ecoPN: IO-Link Master:

Version All versions is affected.

Siemens SIMATIC ET200S (incl. SIPLUS variants):

Version All versions is affected.

Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants):

Version All versions < V4.2.0 is affected.

Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants):

Version All versions < V4.2.3 is affected.

Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants):

Version All versions < V2.0 is affected.

Siemens SIMATIC S7-1500 Software Controller:

Version All versions < V2.0 is affected.

Siemens SIMATIC S7-200 SMART:

Version All versions < V2.03.01 is affected.

Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants):

Before V3.X.16 is affected.

Siemens SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants):

Before V6.0.8 is affected.

Siemens SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants):

Before V6.0.6 is affected.

Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants):

Before V7.0.2 is affected.

Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants):

Version All versions < V8.2.1 is affected.

Siemens SIMATIC TDC CP51M1:

Before V1.1.8 is affected.

Siemens SIMATIC TDC CPU555:

Before V1.1.1 is affected.

Siemens SIMATIC WinAC RTX 2010:

Version All versions < V2010 SP3 is affected.

Siemens SIMATIC WinAC RTX F 2010:

Version All versions < V2010 SP3 is affected.

Siemens SIMOCODE pro V PROFINET (incl. SIPLUS variants):

Version All versions < V2.1.1 is affected.

Siemens SIMOTION C:

Version All versions < V5.1 HF1 is affected.

Siemens SIMOTION D:

Version All versions < V5.1 HF1 is affected.

Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants):

Version All versions < V4.4 HF26 is affected.

Siemens SIMOTION P V4.4 and V4.5:

Version All versions < V4.5 HF5 is affected.

Siemens SIMOTION P V5:

Version All versions < V5.1 HF1 is affected.

Siemens SINAMICS DCM w. PN:

Version All versions < V1.4 SP1 HF6 is affected.

Siemens SINAMICS DCP w. PN:

Version All versions < V1.2 HF2 is affected.

Siemens SINAMICS G110M w. PN:

Version All versions < V4.7 SP9 HF1 is affected.

Siemens SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants):

Version All versions < V4.7 SP9 HF1 is affected.

Siemens SINAMICS G130 V4.7 w. PN:

Version All versions < V4.7 HF29 is affected.

Siemens SINAMICS G130 V4.8 w. PN:

Version All versions < V4.8 HF4 is affected.

Siemens SINAMICS G150 V4.7 w. PN:

Version All versions < V4.7 HF29 is affected.

Siemens SINAMICS G150 V4.8 w. PN:

Version All versions < V4.8 HF4 is affected.

Siemens SINAMICS GH150 V4.7 w. PROFINET:

Version All versions < V4.7 SP5 HF7 is affected.

Siemens SINAMICS GL150 V4.7 w. PROFINET:

Version All versions < V4.8 SP2 is affected.

Siemens SINAMICS GM150 V4.7 w. PROFINET:

Version All versions < V4.7 HF31 is affected.

Siemens SINAMICS S110 w. PN:

Version All versions < V4.4 SP3 HF6 is affected.

Siemens SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants):

Version All versions < V4.7 is affected.

Siemens SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants):

Version All versions is affected.

Siemens SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants):

Version All versions < V4.7 HF29 is affected.

Siemens SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants):

Version All versions < V4.8 HF5 is affected.

Siemens SINAMICS S150 V4.7 w. PN:

Version All versions < V4.7 HF29 is affected.

Siemens SINAMICS S150 V4.8 w. PN:

Version All versions < V4.8 HF4 is affected.

Siemens SINAMICS SL150 V4.7.0 w. PROFINET:

Version All versions < V4.7 HF30 is affected.

Siemens SINAMICS SL150 V4.7.4 w. PROFINET:

Version All versions < V4.8 SP2 is affected.

Siemens SINAMICS SL150 V4.7.5 w. PROFINET:

Version All versions < V4.8 SP2 is affected.

Siemens SINAMICS SM120 V4.7 w. PROFINET:

Version All versions < V4.8 SP2 is affected.

Siemens SINAMICS V90 w. PN:

Version All versions < V1.02 is affected.

Siemens SINUMERIK 840D sl:

Version All versions < V4.8 SP3 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN HF:

Before V4.2.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN HF:

Before V4.2.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL:

Before V4.2.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN ST:

Before V4.1.0 is affected.

Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL:

Before V4.1.0 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF:

Before V4.2.0 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF:

Before V4.2.0 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL:

Before V4.2.0 is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL:

Before * is affected.

Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL:

Before * is affected.

Siemens SIRIUS Soft Starter 3RW44 PN:

Version All versions is affected.

Exploit Probability

EPSS

5.26%

Percentile

89.77%