Multiple Siemens Products Multiple Denial of Service Vulnerabilities

Bugtraq ID:	98369
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-2680 CVE-2017-2681
Remote:	Yes
Local:	No
Published:	May 08 2017 12:00AM
Updated:	May 09 2018 02:00PM
Credit:	Duan JinTong, Ma ShaoShuai, and Cheng Lei from NSFOCUS Security Team.
Vulnerable:	Siemens UPS1600 PROFINET 0 Siemens Softnet PROFINET IO 0 Siemens SITOP PSU8600 0 Siemens SIRIUS Soft starter 3RW44 PN 0 Siemens SIRIUS ACT 3SU1 0 Siemens SINUMERIK 840D 0 Siemens SINUMERIK 828D 0 Siemens SINAMICS SM150 4.7 Siemens SINAMICS SM120 4.7 Siemens SINAMICS SL150 4.7.5 Siemens SINAMICS SL150 4.7.4 Siemens SINAMICS SL150 4.7 Siemens SINAMICS GM150 4.7 Siemens SINAMICS GL150 4.7 Siemens SINAMICS GH150 4.7 Siemens SINAMICS 0 Siemens SIMOTION 0 Siemens SIMATIC WinAC RTX 2010 0 Siemens SIMATIC Teleservice Adapter Standard Modem 0 Siemens SIMATIC S7-400 0 Siemens SIMATIC S7-300 0 Siemens SIMATIC S7-200 SMART 0 Siemens SIMATIC S7-1500 0 Siemens SIMATIC RF685R 0 Siemens SIMATIC RF680R 0 Siemens SIMATIC RF650R 0 Siemens SIMATIC ET 200 0 Siemens SIMATIC CP 443-1 0 Siemens SIMATIC CP 343-1 0 Siemens SIMATIC CP 1626 0 Siemens SIMATIC CP 1616 0 Siemens SIMATIC CP 1604 0 Siemens SIMATIC CP 1543-1 2.0.28 Siemens SIMATIC CP 1543-1 0 Siemens SIMATIC CP 1542SP-1 0 Siemens SIMATIC CP 1243-8 IRC 0 Siemens SIMATIC CP 1243-7 LTE EU/US 0 Siemens SIMATIC CP 1243-1 0 Siemens SIMATIC CP 1242-7 GPRS V2 0 Siemens SCALANCE XR500 0 Siemens SCALANCE XM400 0 Siemens SCALANCE X414 0 Siemens Scalance X408 4.0 Siemens Scalance X408 3.0 Siemens SCALANCE X300 0 Siemens SCALANCE X200 IRT 0 Siemens SCALANCE X200 0 Siemens Scalance W700 Series Firmware 4.4 Siemens Scalance W700 Series Firmware 4.5.4 Siemens SCALANCE S615 0 Siemens SCALANCE M-800 4.02 Siemens SCALANCE M-800 0 Siemens IE/AS-i Link PN IO 0 Siemens Extension Unit 22�?� PROFINET 0 Siemens Extension Unit 19�?� PROFINET 0 Siemens Extension Unit 15�?� PROFINET 0 Siemens Extension Unit 12�?� PROFINET 0 Siemens E/PB-Link 0
Not Vulnerable:	Siemens SINUMERIK 840D sl 4.7 Siemens SINUMERIK 828D 4.7 Siemens SINAMICS SM120 4.8 SP2 Siemens SINAMICS SL150 4.8 SP2 Siemens SINAMICS GM150 4.8 SP2 Siemens SINAMICS GL150 4.8 SP2 Siemens SINAMICS GH150 4.8 SP2 Siemens SIMATIC RF685R 3.0 Siemens SIMATIC RF680R 3.0 Siemens SIMATIC CP 1616 2.7 Siemens SIMATIC CP 1604D 2.7 Siemens SIMATIC CP 1243-8 IRC 2.1.82 Siemens SIMATIC CP 1243-7 LTE EU/US 2.1.82 Siemens SIMATIC CP 1242-7 GPRS V2 2.1.82 Siemens SIMATIC RF650R 3.0 Siemens SIMATIC CP 443-1 3.2.17 Siemens SIMATIC CP 1543 1.2.1 Siemens SIMATIC CM1542 1.2 Siemens SCALANCE W700 6.1 Siemens Extension Unit 22�?� PROFINET 1.1.1 Siemens Extension Unit 19�?� PROFINET 1.1.1 Siemens Extension Unit 15�?� PROFINET 1.1.1 Siemens Extension Unit 12�?� PROFINET 1.1.1

Multiple Siemens Products Multiple Denial of Service Vulnerabilities

Multiple Siemens Products is prone to multiple denial-of-service vulnerabilities.

Attackers can exploit these issues to cause a denial-of-service condition. Manual restart of the server is required to resume normal operation.

Multiple Siemens Products Multiple Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Siemens Products Multiple Denial of Service Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Multiple Siemens Products Multiple Denial of Service Vulnerabilities

References:

• Siemens Homepage (Siemens)
  
• ICSA-17-129-02:Siemens devices using the PROFINET Discovery and Configuration Pr (CERT)
  
• ICSA-18-023-02 Siemens Industrial Products (CERT)
  
• SSA-284673: Vulnerability in Industrial Products (Siemens)
  
• SSA-293562: Vulnerabilities in Industrial Products (Siemens)