CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

High8.7EPSS 3.3%

Published: 26 Dec 2017
Updated: 5 Aug 2024
Reserved: 9 Aug 2017
Assigned by: siemens

Description

Scores

CVSS scores of CVE-2017-12741, by who scored it
Scored by	CVSS	Score	Vector
siemensCNA (assigner)	4.0	High8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
siemensCNA (assigner)	3.1	High7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVDNVD · Modified	4.0	High8.7	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 3.3% · top 11% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.7.

Weakness

CWE-400: Uncontrolled Resource Consumption (opens in a new tab)All about CWE-400 and its CVEs

Affected products

Siemens · Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- affected All versions < V4.1.1 Patch 05
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
- affected All versions < V4.5
Siemens · Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
- affected All versions < V4.5
Siemens · SIMATIC Compact Field Unit
- affected All versions
Siemens · SIMATIC ET 200AL IM 157-1 PN
- affected < V1.0.2
Siemens · SIMATIC ET 200M (incl. SIPLUS variants)
- affected All versions
Siemens · SIMATIC ET 200MP IM 155-5 PN BA
- affected < V4.0.2
Siemens · SIMATIC ET 200MP IM 155-5 PN HF
- affected < V4.2.0
Siemens · SIMATIC ET 200MP IM 155-5 PN ST
- affected < V4.1.0
Siemens · SIMATIC ET 200pro IM 154-3 PN HF
- affected < *
Siemens · SIMATIC ET 200pro IM 154-4 PN HF
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN BA
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
- affected All versions < V1.1.0
Siemens · SIMATIC ET 200SP IM 155-6 PN HF
- affected < V4.2.0
Siemens · SIMATIC ET 200SP IM 155-6 PN HS
- affected < V4.0.1
Siemens · SIMATIC ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIMATIC ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 4AO U/I 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
- affected All versions
Siemens · SIMATIC ET200ecoPN: IO-Link Master
- affected All versions
Siemens · SIMATIC ET200S (incl. SIPLUS variants)
- affected All versions
Siemens · SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
- affected All versions < V4.2.0
Siemens · SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
- affected All versions < V4.2.3
Siemens · SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- affected All versions < V2.0
Siemens · SIMATIC S7-1500 Software Controller
- affected All versions < V2.0
Siemens · SIMATIC S7-200 SMART
- affected All versions < V2.03.01
Siemens · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
- affected < V3.X.16
Siemens · SIMATIC S7-400 H V6 and below CPU family (incl. SIPLUS variants)
- affected < V6.0.8
Siemens · SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
- affected < V6.0.6
Siemens · SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
- affected < V7.0.2
Siemens · SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
- affected All versions < V8.2.1
Siemens · SIMATIC TDC CP51M1
- affected < V1.1.8
Siemens · SIMATIC TDC CPU555
- affected < V1.1.1
Siemens · SIMATIC WinAC RTX 2010
- affected All versions < V2010 SP3
Siemens · SIMATIC WinAC RTX F 2010
- affected All versions < V2010 SP3
Siemens · SIMOCODE pro V PROFINET (incl. SIPLUS variants)
- affected All versions < V2.1.1
Siemens · SIMOTION C
- affected All versions < V5.1 HF1
Siemens · SIMOTION D
- affected All versions < V5.1 HF1
Siemens · SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
- affected All versions < V4.4 HF26
Siemens · SIMOTION P V4.4 and V4.5
- affected All versions < V4.5 HF5
Siemens · SIMOTION P V5
- affected All versions < V5.1 HF1
Siemens · SINAMICS DCM w. PN
- affected All versions < V1.4 SP1 HF6
Siemens · SINAMICS DCP w. PN
- affected All versions < V1.2 HF2
Siemens · SINAMICS G110M w. PN
- affected All versions < V4.7 SP9 HF1
Siemens · SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)
- affected All versions < V4.7 SP9 HF1
Siemens · SINAMICS G130 V4.7 w. PN
- affected All versions < V4.7 HF29
Siemens · SINAMICS G130 V4.8 w. PN
- affected All versions < V4.8 HF4
Siemens · SINAMICS G150 V4.7 w. PN
- affected All versions < V4.7 HF29
Siemens · SINAMICS G150 V4.8 w. PN
- affected All versions < V4.8 HF4
Siemens · SINAMICS GH150 V4.7 w. PROFINET
- affected All versions < V4.7 SP5 HF7
Siemens · SINAMICS GL150 V4.7 w. PROFINET
- affected All versions < V4.8 SP2
Siemens · SINAMICS GM150 V4.7 w. PROFINET
- affected All versions < V4.7 HF31
Siemens · SINAMICS S110 w. PN
- affected All versions < V4.4 SP3 HF6
Siemens · SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)
- affected All versions < V4.7
Siemens · SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)
- affected All versions
Siemens · SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)
- affected All versions < V4.7 HF29
Siemens · SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)
- affected All versions < V4.8 HF5
Siemens · SINAMICS S150 V4.7 w. PN
- affected All versions < V4.7 HF29
Siemens · SINAMICS S150 V4.8 w. PN
- affected All versions < V4.8 HF4
Siemens · SINAMICS SL150 V4.7.0 w. PROFINET
- affected All versions < V4.7 HF30
Siemens · SINAMICS SL150 V4.7.4 w. PROFINET
- affected All versions < V4.8 SP2
Siemens · SINAMICS SL150 V4.7.5 w. PROFINET
- affected All versions < V4.8 SP2
Siemens · SINAMICS SM120 V4.7 w. PROFINET
- affected All versions < V4.8 SP2
Siemens · SINAMICS V90 w. PN
- affected All versions < V1.02
Siemens · SINUMERIK 840D sl
- affected All versions < V4.8 SP3
Siemens · SIPLUS ET 200MP IM 155-5 PN HF
- affected < V4.2.0
Siemens · SIPLUS ET 200MP IM 155-5 PN HF
- affected < V4.2.0
Siemens · SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
- affected < V4.2.0
Siemens · SIPLUS ET 200MP IM 155-5 PN ST
- affected < V4.1.0
Siemens · SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
- affected < V4.1.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HF
- affected < V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HF
- affected < V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
- affected < V4.2.0
Siemens · SIPLUS ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
- affected < *
Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
- affected < *
Siemens · SIRIUS Soft Starter 3RW44 PN
- affected All versions

References (7)

101964 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred
https://cert-portal.siemens.com/productcert/html/ssa-346262.html (opens in a new tab)x_transferred
https://cert-portal.siemens.com/productcert/html/ssa-546832.html (opens in a new tab)x_transferred
https://cert-portal.siemens.com/productcert/html/ssa-141614.html (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2017-12741](https://trackcve.app/badge/CVE-2017-12741.svg)](https://trackcve.app/cve/CVE-2017-12741)

Record last updated 5 Aug 2024, 18:51 UTC.