What’s Vulnerable › Vulnerabilities

CVE-2017-9945

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-30 · updated 2026-06-17
• Weakness: CWE-20

Description

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover.

Affected products

• Siemens 7KM PAC Switched Ethernet PROFINET expansion module: All versions < V2.1.3: through 2.1.2

References

• http://www.securityfocus.com/bid/100562
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-771218.pdf
• http://www.securityfocus.com/bid/100562
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-771218.pdf

Get alerted when CVE-2017-9945 or the next vulnerability affects your stack