VulnerabilityModified
CVE-2017-12741
Specially crafted packets sent to port 161/udp could cause a denial of service condition.
HIGH 8.7EPSS 3.31%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
- CVSS 4.0
- 8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 3.31% probability · 88th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-400
- Affected
- siemens/simatic s7-200 firmware · siemens/simatic s7-400pn v6 firmware · siemens/simatic s7-400h v6 firmware · siemens/simatic s7-400pn\/dp v7 firmware · siemens/simatic s7-410 v8 firmware · siemens/simatic s7-300 firmware · siemens/simatic s7-1200 firmware · siemens/simatic s7-1500 firmware · siemens/simatic s7-1500 controller firmware · siemens/simatic winac rtx f 2010 firmware · siemens/simatic et 200al firmware · siemens/simatic et 200ecopn firmware · siemens/simatic et 200m firmware · siemens/simatic et 200mp firmware · siemens/simatic et 200pro firmware · siemens/simatic et 200s firmware · siemens/simatic et 200sp firmware · siemens/dk standard ethernet controller firmware · siemens/ek-ertec 200p firmware · siemens/ek-ertec 200pn io firmware · +18 more
- Source
- productcert@siemens.com
References
- https://cert-portal.siemens.com/productcert/html/ssa-141614.html
- https://cert-portal.siemens.com/productcert/html/ssa-346262.html
- https://cert-portal.siemens.com/productcert/html/ssa-546832.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
- https://www.securityfocus.com/bid/101964
- https://cert-portal.siemens.com/productcert/html/ssa-141614.html
- https://cert-portal.siemens.com/productcert/html/ssa-346262.html
- https://cert-portal.siemens.com/productcert/html/ssa-546832.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-141614.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-346262.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
- https://www.securityfocus.com/bid/101964
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.