Multiple Siemens Products CVE-2017-12741 Denial of Service Vulnerability

Bugtraq ID:	101964
Class:	Input Validation Error
CVE:	CVE-2017-12741
Remote:	Yes
Local:	No
Published:	Nov 23 2017 12:00AM
Updated:	Apr 10 2019 07:00AM
Credit:	George Lashenko, Security researcher at CyberX
Vulnerable:	Siemens Softnet PROFINET IO 0 Siemens SIRIUS Soft starter 3RW44 PN 0 Siemens SINUMERIK 840D sl 4.7 Siemens SINUMERIK 840D 0 Siemens SINAMICS SM150 4.7 Siemens SINAMICS SM120 4.7 Siemens SINAMICS SL150 4.7.5 Siemens SINAMICS SL150 4.7.4 Siemens SINAMICS SL150 4.7 Siemens Sinamics S150 - Siemens Sinamics S120 0 Siemens Sinamics S120 - Siemens SINAMICS GM150 4.7 Siemens SINAMICS GL150 4.7 Siemens SINAMICS GH150 4.7 Siemens Sinamics G150 - Siemens Sinamics G130 - Siemens Sinamics G120 - Siemens SINAMICS DCP 0 Siemens SINAMICS DCM 0 Siemens SIMOTION 0 Siemens SIMOCODE pro V EIP 1.0.1 Siemens SIMOCODE pro V EIP 1.0 Siemens SIMATIC WinAC RTX 2010 0 Siemens SIMATIC WinAC RTX F 2010 SP2 Siemens SIMATIC WinAC RTX 2010 SP2 Siemens SIMATIC S7-410 8 Siemens SIMATIC S7-400 PN V6 0 Siemens SIMATIC S7-400 PN 0 Siemens SIMATIC S7-400 H V6 0 Siemens SIMATIC S7-300 0 Siemens SIMATIC S7-200 0 Siemens SIMATIC S7-1500 1.8.3 Siemens SIMATIC S7-1500 1.6 Siemens SIMATIC S7-1500 1.5.0 Siemens SIMATIC S7-1500 0 Siemens SIMATIC S7-1200 4.1.3 Siemens SIMATIC S7-1200 4.0 Siemens SIMATIC S7-1200 3.0.1 Siemens SIMATIC S7-1200 3.0.0 Siemens SIMATIC S7-1200 3.0 Siemens SIMATIC S7-1200 2.0.3 Siemens SIMATIC S7-1200 2.0.2 Siemens SIMATIC ET 200 0 Siemens SIMATIC Compact Field Unit 0 Siemens PROFINET IO 1.4.1 Siemens PROFINET IO 0
Not Vulnerable:	Siemens SINAMICS SM120 4.8 SP2 Siemens SINAMICS SL150 4.8 SP2 Siemens SINAMICS GM150 4.8 SP2 Siemens SINAMICS GL150 4.8 SP2 Siemens SINAMICS GH150 4.8 SP2 Siemens Sinamics G120p - Siemens Sinamics G120d - Siemens Sinamics G120c - Siemens Sinamics G120 Update 4.7 SP9 HF1 Siemens SINAMICS G110M 0 Siemens SIMOTION P 5.1 HF1 Siemens SIMOTION C 5.1 HF1 Siemens SIMOCODE pro V EIP 1.0.2 Siemens SIMATIC S7-400 PN V6 6.0.6 Siemens SIMATIC S7-200 SMART 2.3.1

Multiple Siemens Products CVE-2017-12741 Denial of Service Vulnerability

Multiple Siemens products are prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected device, denying service to legitimate users.

Multiple Siemens Products CVE-2017-12741 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Multiple Siemens Products CVE-2017-12741 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Siemens Products CVE-2017-12741 Denial of Service Vulnerability

References:

• Siemens Homepage (Siemens)
  
• Advisory (ICSA-17-339-01) Siemens Industrial Products (ICS-CERT)
  
• ICSA-18-128-01 Siemens Medium Voltage SINAMICS Products (CERT)
  
• ICSA-19-099-01: Siemens SIMOCODE pro V EIP (ICS CERT)
  
• siemens_security_advisory (Siemens)
  
• SSA-546832: Vulnerabilities in Medium Voltage SINAMICS Products (Siemens)