What’s Vulnerable › Vulnerabilities

CVE-2017-2680

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-11 · updated 2026-06-17
• Weakness: CWE-400

Description

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Affected products

• Siemens Dk Standard Ethernet Controller Firmware: before 4.1.1; 4.1.1 — fixed in 4.1.1
• Siemens Ek-Ertec 200 Pn Io Firmware: before 4.2.1; 4.2.1 — fixed in 4.2.1
• Siemens Ek-Ertec 200P Pn Io Firmware: before 4.4.0; 4.4.0 — fixed in 4.4.0
• Siemens Extension Unit 12 Profinet Firmware: before 01.01.01 — fixed in 01.01.01
• Siemens Extension Unit 15 Profinet Firmware: before 01.01.01 — fixed in 01.01.01
• Siemens Extension Unit 19 Profinet Firmware: before 01.01.01 — fixed in 01.01.01
• Siemens Extension Unit 22 Profinet Firmware: before 01.01.01 — fixed in 01.01.01
• Siemens Ie/As-I Link Pn Io Firmware: all versions
• Siemens Ie/Pb-Link Firmware: before 3.0 — fixed in 3.0
• Siemens Pn/Pn Coupler Firmware: before 4.0 — fixed in 4.0
• Siemens Scalance M-800 Firmware: before 4.03 — fixed in 4.03
• Siemens Scalance S615 Firmware: before 4.03 — fixed in 4.03
• Siemens Scalance W700 Firmware: before 6.1 — fixed in 6.1
• Siemens Scalance X200 Firmware: before 5.2.2 — fixed in 5.2.2
• Siemens Scalance X200 Irt Firmware: before 5.4.0 — fixed in 5.4.0
• Siemens Scalance X300 Firmware: before 4.1.0 — fixed in 4.1.0
• Siemens Scalance X408 Firmware: before 4.1.0 — fixed in 4.1.0
• Siemens Scalance X414 Firmware: before 3.10.2 — fixed in 3.10.2
• Siemens Scalance Xm400 Firmware: before 6.1 — fixed in 6.1
• Siemens Scalance Xr500 Firmware: before 6.1 — fixed in 6.1
• Siemens Simatic Cm 1542-1 Firmware: before 2.0 — fixed in 2.0
• Siemens Simatic Cp 1242-7 Gprs Firmware: before 2.1.82 — fixed in 2.1.82
• Siemens Simatic Cp 1243-1 Dnp3 Firmware: all versions
• Siemens Simatic Cp 1243-1 Firmware: before 2.1.82 — fixed in 2.1.82
• Siemens Simatic Cp 1243-1 Iec Firmware: all versions
• Siemens Simatic Cp 1243-1 Irc Firmware: before 2.1.82 — fixed in 2.1.82
• Siemens Simatic Cp 1243-7 Lte/Us Firmware: before 2.1.82 — fixed in 2.1.82
• Siemens Simatic Cp 1243-8 Firmware: before 2.1.82 — fixed in 2.1.82
• Siemens Simatic Cp 1542Sp-1 Firmware: before 1.0.15 — fixed in 1.0.15
• Siemens Simatic Cp 1542Sp-1 Irc Firmware: before 1.0.15 — fixed in 1.0.15

How to fix

Upgrade to a fixed version: Siemens Dk Standard Ethernet Controller Firmware 4.1.1; Siemens Ek-Ertec 200 Pn Io Firmware 4.2.1; Siemens Ek-Ertec 200P Pn Io Firmware 4.4.0; Siemens Extension Unit 12 Profinet Firmware 01.01.01; Siemens Extension Unit 15 Profinet Firmware 01.01.01; Siemens Extension Unit 19 Profinet Firmware 01.01.01; Siemens Extension Unit 22 Profinet Firmware 01.01.01; Siemens Ie/Pb-Link Firmware 3.0; Siemens Pn/Pn Coupler Firmware 4.0; Siemens Scalance M-800 Firmware 4.03; Siemens Scalance S615 Firmware 4.03; Siemens Scalance W700 Firmware 6.1. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/98369
• http://www.securitytracker.com/id/1038463
• https://cert-portal.siemens.com/productcert/html/ssa-284673.html
• https://cert-portal.siemens.com/productcert/html/ssa-293562.html
• https://cert-portal.siemens.com/productcert/html/ssa-546832.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf
• http://www.securityfocus.com/bid/98369
• http://www.securitytracker.com/id/1038463

Get alerted when CVE-2017-2680 or the next vulnerability affects your stack