Denial of Service Vulnerability in Siemens Products
CVE-2017-2681
6.5MEDIUM
Key Information:
What is CVE-2017-2681?
A vulnerability exists in certain Siemens products that can be exploited via specially crafted PROFINET DCP packets sent on a local Ethernet segment. This exploitation can result in a denial of service condition, necessitating human intervention for system recovery. It is important to note that PROFIBUS interfaces remain unaffected by this issue.
Affected Version(s)
Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller All versions < V4.1.1 Patch04
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 All versions < V4.2.1 Patch03
Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P All versions < V4.4.0 Patch01