CVE-2017-2680

MEDIUM

Siemens Simatic CP 343-1 Std Firmware < 3.1.3 - Denial of Service

Title source: rule

Description

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

References (10)

Scores

CVSS v3 6.5
EPSS 0.0233
EPSS Percentile 84.7%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (50)
siemens/simatic_cp_343-1_std_firmware < 3.1.3
siemens/simatic_cp_343-1_lean_firmware < 3.1.3
siemens/simatic_cp_343-1_adv_firmware
siemens/simatic_cp_443-1_std_firmware < 3.2.17
siemens/simatic_cp_443-1_adv_firmware < 3.2.17
siemens/simatic_cp_443-1_opc-ua_firmware
siemens/simatic_cp_1243-1_firmware < 2.1.82
siemens/simatic_cm_1542-1_firmware < 2.0
siemens/simatic_cp_1542sp-1_firmware < 1.0.15
siemens/simatic_cp_1542sp-1_irc_firmware < 1.0.15
... and 40 more
Published May 11, 2017
Tracked Since Feb 18, 2026