SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition.

HIGH 8.7EPSS 3.31%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

CVSS 4.0
8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
3.31% probability · 88th percentile
CISA KEV
Not listed
Weakness
CWE-400
Affected
siemens/simatic s7-200 firmware · siemens/simatic s7-400pn v6 firmware · siemens/simatic s7-400h v6 firmware · siemens/simatic s7-400pn\/dp v7 firmware · siemens/simatic s7-410 v8 firmware · siemens/simatic s7-300 firmware · siemens/simatic s7-1200 firmware · siemens/simatic s7-1500 firmware · siemens/simatic s7-1500 controller firmware · siemens/simatic winac rtx f 2010 firmware · siemens/simatic et 200al firmware · siemens/simatic et 200ecopn firmware · siemens/simatic et 200m firmware · siemens/simatic et 200mp firmware · siemens/simatic et 200pro firmware · siemens/simatic et 200s firmware · siemens/simatic et 200sp firmware · siemens/dk standard ethernet controller firmware · siemens/ek-ertec 200p firmware · siemens/ek-ertec 200pn io firmware · +18 more
Source
productcert@siemens.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.