Multiple Siemens Products CVE-2017-6865 Denial of Service Vulnerability
BID:98366
Info
Multiple Siemens Products CVE-2017-6865 Denial of Service Vulnerability
| Bugtraq ID: | 98366 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-6865 |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2017 12:00AM |
| Updated: | May 23 2017 04:23PM |
| Credit: | Duan JinTong, Ma ShaoShuai, and Cheng Lei from NSFOCUS Security Team. |
| Vulnerable: |
Siemens SMART PC Access 2.0 Siemens SINUMERIK 808D Programming Tool 0 Siemens SINEMA Server 13 SP2 Siemens SINEMA Server 12.0 Sp1 Siemens SINEMA Server 12.0 - Siemens SINEMA Server 0 Siemens SINAUT ST7CC 0 Siemens SIMATIC WinCC Flexible 2008 SP3 UP7 Siemens SIMATIC WinCC Flexible 2008 SP2 Siemens SIMATIC WinCC Flexible 2008 SP1 Siemens SIMATIC WinCC Flexible 2008 Siemens SIMATIC WinCC (TIA Portal) Basic 14 Siemens SIMATIC WinCC (TIA Portal) V13 SP1 Siemens SIMATIC WinCC (TIA Portal) V13 Siemens SIMATIC WinCC 0 Siemens SIMATIC WinAC RTX F 2010 SP2 Siemens SIMATIC WinAC RTX 2010 SP2 Siemens Simatic Step 7 TIA Portal V14 Siemens Simatic Step 7 TIA Portal V13 SP1 Siemens Simatic Step 7 TIA Portal V13 Siemens Simatic Step 7 5.5 SP4 HF4 Siemens Simatic Step 7 5.5 SP4 Siemens Simatic Step 7 5.5 SP3 HF10 Siemens Simatic Step 7 5.5 SP3 Siemens Simatic Step 7 5.5 SP2 HF7 Siemens Simatic Step 7 5.5 Sp2 Siemens Simatic Step 7 5.5 SP1 HF2 Siemens Simatic Step 7 5.5 Sp1 Siemens SIMATIC PCS 7 7.1 SP4 Siemens SIMATIC PCS 7 7.1 Siemens SIMATIC PCS 7 7 Siemens SIMATIC NET PC-Software 14 Siemens SIMATIC NET PC-Software 13 SP2 Siemens SIMATIC NET PC-Software 13 HF1 Siemens SIMATIC NET PC-Software 13 Siemens SIMATIC NET PC-Software 12 SP2 HF3 Siemens SIMATIC NET PC-Software 12 Siemens SIMATIC Automation Tool 1.0.2 Siemens SIMATIC Automation Tool 1.0 Siemens Security Configuration Tool (SCT) 0 Siemens Primary Setup Tool (PST) 0 Siemens Micro/Win 0 |
| Not Vulnerable: |
Siemens SIMATIC WinCC (TIA Portal) 14 SP1 Siemens SIMATIC WinCC (TIA Portal) 13 SP2 Siemens Simatic Step 7 TIA Portal 14 SP1 Siemens Simatic Step 7 TIA Portal 13 SP2 |
Discussion
Multiple Siemens Products CVE-2017-6865 Denial of Service Vulnerability
Multiple Siemens products are prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected device, denying service to legitimate users.
Multiple Siemens products are prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the affected device, denying service to legitimate users.
Solution / Fix
Multiple Siemens Products CVE-2017-6865 Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Siemens Products CVE-2017-6865 Denial of Service Vulnerability
References:
References: