CVE-2017-2680

Description

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Category

7.1
CVSS
Severity: High
CVSS 4.0 •
CVSS 3.1 •
CVSS 2.0 •
EPSS 2.33% Top 20%
Vendor Advisory siemens.com Vendor Advisory siemens.com Vendor Advisory siemens.com
Affected: Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Affected: Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200
Affected: Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P
Affected: Siemens Extension Unit 12" PROFINET
Affected: Siemens Extension Unit 15" PROFINET
Affected: Siemens Extension Unit 19" PROFINET
Affected: Siemens Extension Unit 22" PROFINET
Affected: Siemens IE/AS-i Link PN IO
Affected: Siemens IE/PB-Link (incl. SIPLUS NET variants)
Affected: Siemens SCALANCE M-800 family (incl. S615, MUM-800 and RM1224)
Affected: Siemens SCALANCE W-700 IEEE 802.11n family
Affected: Siemens SCALANCE X-200 family (incl. SIPLUS NET variants)
Affected: Siemens SCALANCE X-200IRT family (incl. SIPLUS NET variants)
Affected: Siemens SCALANCE X-300 family (incl. X408 and SIPLUS NET variants)
Affected: Siemens SCALANCE X408 family
Affected: Siemens SCALANCE X414
Affected: Siemens SCALANCE XM-400 family
Affected: Siemens SCALANCE XR-500 family
Affected: Siemens SIMATIC CM 1542-1
Affected: Siemens SIMATIC CM 1542SP-1
Affected: Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1243-7 LTE US
Affected: Siemens SIMATIC CP 1243-8 IRC
Affected: Siemens SIMATIC CP 1243-8 IRC
Affected: Siemens SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1543-1 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1543SP-1 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 1604
Affected: Siemens SIMATIC CP 1616
Affected: Siemens SIMATIC CP 1626
Affected: Siemens SIMATIC CP 343-1 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 343-1 Lean (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 443-1 (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 443-1 Advanced (incl. SIPLUS variants)
Affected: Siemens SIMATIC CP 443-1 OPC UA
Affected: Siemens SIMATIC DK-16xx PN IO
Affected: Siemens SIMATIC ET 200AL IM 157-1 PN
Affected: Siemens SIMATIC ET 200M (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN BA
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN HF
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN ST
Affected: Siemens SIMATIC ET 200pro IM 154-3 PN HF
Affected: Siemens SIMATIC ET 200pro IM 154-4 PN HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN BA
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HS
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12
Affected: Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12
Affected: Siemens SIMATIC ET200ecoPN: IO-Link Master
Affected: Siemens SIMATIC ET200S (incl. SIPLUS variants)
Affected: Siemens SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants)
Affected: Siemens SIMATIC MV420 SR-B
Affected: Siemens SIMATIC MV420 SR-B Body
Affected: Siemens SIMATIC MV420 SR-P
Affected: Siemens SIMATIC MV420 SR-P Body
Affected: Siemens SIMATIC MV440 HR
Affected: Siemens SIMATIC MV440 SR
Affected: Siemens SIMATIC MV440 UR
Affected: Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)
Affected: Siemens SIMATIC RF650R
Affected: Siemens SIMATIC RF680R
Affected: Siemens SIMATIC RF685R
Affected: Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Affected: Siemens SIMATIC S7-1500 Software Controller
Affected: Siemens SIMATIC S7-200 SMART
Affected: Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Affected: Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-410 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC TDC CP51M1
Affected: Siemens SIMATIC TDC CPU555
Affected: Siemens SIMATIC Teleservice Adapter IE Advanced
Affected: Siemens SIMATIC Teleservice Adapter IE Basic
Affected: Siemens SIMATIC Teleservice Adapter IE Standard
Affected: Siemens SIMATIC WinAC RTX 2010
Affected: Siemens SIMATIC WinAC RTX F 2010
Affected: Siemens SIMOCODE pro V PROFINET (incl. SIPLUS variants)
Affected: Siemens SIMOTION
Affected: Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants)
Affected: Siemens SINAMICS DCM w. PN
Affected: Siemens SINAMICS DCP w. PN
Affected: Siemens SINAMICS G110M w. PN
Affected: Siemens SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)
Affected: Siemens SINAMICS G130 V4.7 w. PN
Affected: Siemens SINAMICS G130 V4.8 w. PN
Affected: Siemens SINAMICS G150 V4.7 w. PN
Affected: Siemens SINAMICS G150 V4.8 w. PN
Affected: Siemens SINAMICS GH150 V4.7 w. PROFINET
Affected: Siemens SINAMICS GL150 V4.7 w. PROFINET
Affected: Siemens SINAMICS GM150 V4.7 w. PROFINET
Affected: Siemens SINAMICS S110 w. PN
Affected: Siemens SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants)
Affected: Siemens SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants)
Affected: Siemens SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants)
Affected: Siemens SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants)
Affected: Siemens SINAMICS S150 V4.7 w. PN
Affected: Siemens SINAMICS S150 V4.8 w. PN
Affected: Siemens SINAMICS SL150 V4.7.0 w. PROFINET
Affected: Siemens SINAMICS SL150 V4.7.4 w. PROFINET
Affected: Siemens SINAMICS SL150 V4.7.5 w. PROFINET
Affected: Siemens SINAMICS SM120 V4.7 w. PROFINET
Affected: Siemens SINAMICS V90 w. PN
Affected: Siemens SINUMERIK 828D V4.5 and prior
Affected: Siemens SINUMERIK 828D V4.7
Affected: Siemens SINUMERIK 840D sl V4.5 and prior
Affected: Siemens SINUMERIK 840D sl V4.7
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL
Affected: Siemens SIRIUS ACT 3SU1 interface module PROFINET
Affected: Siemens SIRIUS Motor Starter M200D PROFINET
Affected: Siemens SIRIUS Soft Starter 3RW44 PN
Affected: Siemens SITOP PSU8600 PROFINET
Affected: Siemens SITOP UPS1600 PROFINET (incl. SIPLUS variants)
Affected: Siemens Softnet PROFINET IO for PC-based Windows systems
Published at:
Updated at:

References

Link Tags
http://www.securitytracker.com/id/1038463 vdb entry third party advisory
http://www.securityfocus.com/bid/98369 vdb entry third party advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf vendor advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02 third party advisory us government resource
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf vendor advisory
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf broken link
https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf vendor advisory
https://cert-portal.siemens.com/productcert/html/ssa-293562.html
https://cert-portal.siemens.com/productcert/html/ssa-284673.html
https://cert-portal.siemens.com/productcert/html/ssa-546832.html

Frequently Asked Questions

What is the severity of CVE-2017-2680?
CVE-2017-2680 has been scored as a high severity vulnerability.
How to fix CVE-2017-2680?
To fix CVE-2017-2680, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2017-2680 being actively exploited in the wild?
It is possible that CVE-2017-2680 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2017-2680?
CVE-2017-2680 affects Siemens Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Siemens Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, Siemens Extension Unit 12" PROFINET, Siemens Extension Unit 15" PROFINET, Siemens Extension Unit 19" PROFINET, Siemens Extension Unit 22" PROFINET, Siemens IE/AS-i Link PN IO, Siemens IE/PB-Link (incl. SIPLUS NET variants), Siemens SCALANCE M-800 family (incl. S615, MUM-800 and RM1224), Siemens SCALANCE W-700 IEEE 802.11n family, Siemens SCALANCE X-200 family (incl. SIPLUS NET variants), Siemens SCALANCE X-200IRT family (incl. SIPLUS NET variants), Siemens SCALANCE X-300 family (incl. X408 and SIPLUS NET variants), Siemens SCALANCE X408 family, Siemens SCALANCE X414, Siemens SCALANCE XM-400 family, Siemens SCALANCE XR-500 family, Siemens SIMATIC CM 1542-1, Siemens SIMATIC CM 1542SP-1, Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants), Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants), Siemens SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants), Siemens SIMATIC CP 1243-1 IEC (incl. SIPLUS variants), Siemens SIMATIC CP 1243-7 LTE US, Siemens SIMATIC CP 1243-8 IRC, Siemens SIMATIC CP 1243-8 IRC, Siemens SIMATIC CP 1542SP-1 IRC (incl. SIPLUS variants), Siemens SIMATIC CP 1543-1 (incl. SIPLUS variants), Siemens SIMATIC CP 1543SP-1 (incl. SIPLUS variants), Siemens SIMATIC CP 1604, Siemens SIMATIC CP 1616, Siemens SIMATIC CP 1626, Siemens SIMATIC CP 343-1 (incl. SIPLUS variants), Siemens SIMATIC CP 343-1 Advanced (incl. SIPLUS variants), Siemens SIMATIC CP 343-1 Lean (incl. SIPLUS variants), Siemens SIMATIC CP 443-1 (incl. SIPLUS variants), Siemens SIMATIC CP 443-1 Advanced (incl. SIPLUS variants), Siemens SIMATIC CP 443-1 OPC UA, Siemens SIMATIC DK-16xx PN IO, Siemens SIMATIC ET 200AL IM 157-1 PN, Siemens SIMATIC ET 200M (incl. SIPLUS variants), Siemens SIMATIC ET 200MP IM 155-5 PN BA, Siemens SIMATIC ET 200MP IM 155-5 PN HF, Siemens SIMATIC ET 200MP IM 155-5 PN ST, Siemens SIMATIC ET 200pro IM 154-3 PN HF, Siemens SIMATIC ET 200pro IM 154-4 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN BA, Siemens SIMATIC ET 200SP IM 155-6 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN HS, Siemens SIMATIC ET 200SP IM 155-6 PN ST, Siemens SIMATIC ET 200SP IM 155-6 PN ST BA, Siemens SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 4AO U/I 4xM12, Siemens SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, Siemens SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, Siemens SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, Siemens SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, Siemens SIMATIC ET200ecoPN: IO-Link Master, Siemens SIMATIC ET200S (incl. SIPLUS variants), Siemens SIMATIC HMI Comfort Panels, HMI Multi Panels, HMI Mobile Panels (incl. SIPLUS variants), Siemens SIMATIC MV420 SR-B, Siemens SIMATIC MV420 SR-B Body, Siemens SIMATIC MV420 SR-P, Siemens SIMATIC MV420 SR-P Body, Siemens SIMATIC MV440 HR, Siemens SIMATIC MV440 SR, Siemens SIMATIC MV440 UR, Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), Siemens SIMATIC RF650R, Siemens SIMATIC RF680R, Siemens SIMATIC RF685R, Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), Siemens SIMATIC S7-1500 Software Controller, Siemens SIMATIC S7-200 SMART, Siemens SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants), Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-410 CPU family (incl. SIPLUS variants), Siemens SIMATIC TDC CP51M1, Siemens SIMATIC TDC CPU555, Siemens SIMATIC Teleservice Adapter IE Advanced, Siemens SIMATIC Teleservice Adapter IE Basic, Siemens SIMATIC Teleservice Adapter IE Standard, Siemens SIMATIC WinAC RTX 2010, Siemens SIMATIC WinAC RTX F 2010, Siemens SIMOCODE pro V PROFINET (incl. SIPLUS variants), Siemens SIMOTION, Siemens SIMOTION D4xx V4.4 for SINAMICS SM150i-2 w. PROFINET (incl. SIPLUS variants), Siemens SINAMICS DCM w. PN, Siemens SINAMICS DCP w. PN, Siemens SINAMICS G110M w. PN, Siemens SINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants), Siemens SINAMICS G130 V4.7 w. PN, Siemens SINAMICS G130 V4.8 w. PN, Siemens SINAMICS G150 V4.7 w. PN, Siemens SINAMICS G150 V4.8 w. PN, Siemens SINAMICS GH150 V4.7 w. PROFINET, Siemens SINAMICS GL150 V4.7 w. PROFINET, Siemens SINAMICS GM150 V4.7 w. PROFINET, Siemens SINAMICS S110 w. PN, Siemens SINAMICS S120 prior to V4.7 w. PN (incl. SIPLUS variants), Siemens SINAMICS S120 V4.7 SP1 w. PN (incl. SIPLUS variants), Siemens SINAMICS S120 V4.7 w. PN (incl. SIPLUS variants), Siemens SINAMICS S120 V4.8 w. PN (incl. SIPLUS variants), Siemens SINAMICS S150 V4.7 w. PN, Siemens SINAMICS S150 V4.8 w. PN, Siemens SINAMICS SL150 V4.7.0 w. PROFINET, Siemens SINAMICS SL150 V4.7.4 w. PROFINET, Siemens SINAMICS SL150 V4.7.5 w. PROFINET, Siemens SINAMICS SM120 V4.7 w. PROFINET, Siemens SINAMICS V90 w. PN, Siemens SINUMERIK 828D V4.5 and prior, Siemens SINUMERIK 828D V4.7, Siemens SINUMERIK 840D sl V4.5 and prior, Siemens SINUMERIK 840D sl V4.7, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, Siemens SIPLUS ET 200MP IM 155-5 PN ST, Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA, Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL, Siemens SIRIUS ACT 3SU1 interface module PROFINET, Siemens SIRIUS Motor Starter M200D PROFINET, Siemens SIRIUS Soft Starter 3RW44 PN, Siemens SITOP PSU8600 PROFINET, Siemens SITOP UPS1600 PROFINET (incl. SIPLUS variants), Siemens Softnet PROFINET IO for PC-based Windows systems.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.