CVE-2017-2680 | BDVDB-2026-85266 Detail
SiemensDevelopment/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
Description#
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: adjacent.
Weaknesses#
- CWE-400 Uncontrolled Resource Consumption
References#
- http://www.securitytracker.com/id/1038463
- http://www.securityfocus.com/bid/98369
- https://cert-portal.siemens.com/productcert/pdf/ssa-546832.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-18-023-02
- https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284673.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-284673.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-293562.html
- https://cert-portal.siemens.com/productcert/html/ssa-284673.html
- https://cert-portal.siemens.com/productcert/html/ssa-546832.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.