Skip to content
Sign in
6.5 Medium

CVE-2017-2680 Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a…

Description

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Affected products and versions

Product Affected versions Fixed in
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller Versions not published
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 Versions not published
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P Versions not published
Extension Unit 12" PROFINET Versions not published
Extension Unit 15" PROFINET Versions not published
Extension Unit 19" PROFINET Versions not published
Extension Unit 22" PROFINET Versions not published
IE/AS-i Link PN IO Versions not published
IE/PB-Link (incl. SIPLUS NET variants) Versions not published
Show the 130 other branches
Product Affected versions Fixed in
SCALANCE M-800 family (incl. S615, MUM-800 and RM1224) Versions not published
SCALANCE W-700 IEEE 802.11n family Versions not published
SCALANCE X-200 family (incl. SIPLUS NET variants) Versions not published
SCALANCE X-200IRT family (incl. SIPLUS NET variants) Versions not published
SCALANCE X-300 family (incl. X408 and SIPLUS NET variants) Versions not published
SCALANCE X408 family Versions not published
SCALANCE X414 Versions not published
SCALANCE XM-400 family Versions not published
SCALANCE XR-500 family Versions not published
SIMATIC CM 1542-1 Versions not published
SIMATIC CM 1542SP-1 Versions not published
SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) Versions not published
SIMATIC CP 1243-1 (incl. SIPLUS variants) Versions not published
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Versions not published
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Versions not published
SIMATIC CP 1243-7 LTE US Versions not published
SIMATIC CP 1243-8 IRC Versions not published
SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants) Versions not published
SIMATIC CP 1543-1 (incl. SIPLUS variants) Versions not published
SIMATIC CP 1543SP-1 (incl. SIPLUS variants) Versions not published
SIMATIC CP 1604 Versions not published
SIMATIC CP 1616 Versions not published
SIMATIC CP 1626 Versions not published
SIMATIC CP 343-1 (incl. SIPLUS variants) Versions not published
SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) Versions not published
SIMATIC CP 343-1 Lean (incl. SIPLUS variants) Versions not published
SIMATIC CP 443-1 (incl. SIPLUS variants) Versions not published
SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) Versions not published
SIMATIC CP 443-1 OPC UA Versions not published
SIMATIC DK-16xx PN IO Versions not published
SIMATIC ET 200AL IM 157-1 PN 1.0 earliest → < 1.0.2 1.0.2
SIMATIC ET 200M (incl. SIPLUS variants) Versions not published
SIMATIC ET 200MP IM 155-5 PN BA 4.0 earliest → < 4.0.1 4.0.1
SIMATIC ET 200MP IM 155-5 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIMATIC ET 200MP IM 155-5 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIMATIC ET 200pro IM 154-3 PN HF Versions not published
SIMATIC ET 200pro IM 154-4 PN HF Versions not published
SIMATIC ET 200SP IM 155-6 PN BA Versions not published
SIMATIC ET 200SP IM 155-6 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIMATIC ET 200SP IM 155-6 PN HS 4.0 earliest → < 4.0.1 4.0.1
SIMATIC ET 200SP IM 155-6 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIMATIC ET 200SP IM 155-6 PN ST BA 4.1 earliest → < 4.1.0 4.1.0
SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 Versions not published
SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 Versions not published
SIMATIC ET200ecoPN, 4AO U/I 4xM12 Versions not published
SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 Versions not published
SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 Versions not published
SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 Versions not published
SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 Versions not published
SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 Versions not published
SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 Versions not published
SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Versions not published
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 Versions not published
SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 Versions not published
SIMATIC ET200ecoPN: IO-Link Master Versions not published
SIMATIC ET200S (incl. SIPLUS variants) Versions not published
SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants) Versions not published
SIMATIC MV420 SR-B 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV420 SR-B Body 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV420 SR-P 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV420 SR-P Body 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV440 HR 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV440 SR 7.0 earliest → < 7.0.6 7.0.6
SIMATIC MV440 UR 7.0 earliest → < 7.0.6 7.0.6
SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) Versions not published
SIMATIC RF650R Versions not published
SIMATIC RF680R Versions not published
SIMATIC RF685R Versions not published
SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Versions not published
SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) Versions not published
SIMATIC S7-1500 Software Controller Versions not published
SIMATIC S7-200 SMART Versions not published
SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) 3 earliest → < 3.X.14 3.X.14
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) 6.0 earliest → < 6.0.7 6.0.7
SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) 6.0 earliest → < 6.0.6 6.0.6
SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) 7.0 earliest → < 7.0.2 7.0.2
SIMATIC S7-410 CPU family (incl. SIPLUS variants) Versions not published
SIMATIC TDC CP51M1 1.1 earliest → < 1.1.8 1.1.8
SIMATIC TDC CPU555 1.1 earliest → < 1.1.1 1.1.1
SIMATIC Teleservice Adapter IE Advanced Versions not published
SIMATIC Teleservice Adapter IE Basic Versions not published
SIMATIC Teleservice Adapter IE Standard Versions not published
SIMATIC WinAC RTX 2010 Versions not published
SIMATIC WinAC RTX F 2010 Versions not published
SIMOCODE pro V PROFINET (incl. SIPLUS variants) Versions not published
SIMOTION Versions not published
SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants) Versions not published
SINAMICS DCM w. PN Versions not published
SINAMICS DCP w. PN Versions not published
SINAMICS G110M w. PN Versions not published
SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants) Versions not published
SINAMICS G130 V4.7 w. PN Versions not published
SINAMICS G130 V4.8 w. PN Versions not published
SINAMICS G150 V4.7 w. PN Versions not published
SINAMICS G150 V4.8 w. PN Versions not published
SINAMICS GH150 V4.7 w. PROFINET Versions not published
SINAMICS GL150 V4.7 w. PROFINET Versions not published
SINAMICS GM150 V4.7 w. PROFINET Versions not published
SINAMICS S110 w. PN Versions not published
SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants) Versions not published
SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants) Versions not published
SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants) Versions not published
SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants) Versions not published
SINAMICS S150 V4.7 w. PN Versions not published
SINAMICS S150 V4.8 w. PN Versions not published
SINAMICS SL150 V4.7.0 w. PROFINET Versions not published
SINAMICS SL150 V4.7.4 w. PROFINET Versions not published
SINAMICS SL150 V4.7.5 w. PROFINET Versions not published
SINAMICS SM120 V4.7 w. PROFINET Versions not published
SINAMICS V90 w. PN Versions not published
SINUMERIK 828D V4.5 and prior Versions not published
SINUMERIK 828D V4.7 Versions not published
SINUMERIK 840D sl V4.5 and prior Versions not published
SINUMERIK 840D sl V4.7 Versions not published
SIPLUS ET 200MP IM 155-5 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200MP IM 155-5 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200MP IM 155-5 PN ST TX RAIL 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN HF 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL 4.2 earliest → < 4.2.0 4.2.0
SIPLUS ET 200SP IM 155-6 PN ST 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN ST BA 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL 4.1 earliest → < 4.1.0 4.1.0
SIPLUS ET 200SP IM 155-6 PN ST TX RAIL 4.1 earliest → < 4.1.0 4.1.0
SIRIUS ACT 3SU1 interface module PROFINET Versions not published
SIRIUS Motor Starter M200D PROFINET Versions not published
SIRIUS Soft Starter 3RW44 PN Versions not published
SITOP PSU8600 PROFINET Versions not published
SITOP UPS1600 PROFINET (incl. SIPLUS variants) Versions not published
Softnet PROFINET IO for PC-based Windows systems Versions not published

Other CVEs of Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller

The 7 CVEs of Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller →
CVE-2020-28400 Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service… 7.5 High CVE-2019-13946 Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple… 7.5 High CVE-2019-10923 An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time… 7.5 High CVE-2019-10936 Affected devices improperly handle large amounts of specially crafted UDP packets 7.5 High
Track this CVE