synced 1 MIN AGO
01 Record

CVE-2017-12741

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

HighPUBLISHEDCNA: siemens
CNA base score8.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

02 Description

Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
3.31% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 88.0% of scored records. A rank, not a probability.
NVD base score
8.7 (CVSS v4.0), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2017-12-26 04:00Z8 YR AGO
Last updated
2024-08-05 18:51Z2 YR AGO
Reserved
2017-08-09
Assigning CNA
siemens
Record state
PUBLISHED
Severity
High (CVSS 8.7)
CNA CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weaknesses
  • CWE-400Uncontrolled Resource ConsumptionClass
Data version
5.1
Document digest
6301efcb7ef0eea869f8d8225e2041fcfcfe4aee0c4cf11730e44ced38db8c03

05 Affected products

VendorProductVersionsPlatforms
SiemensSIMATIC Compact Field UnitAll versions—
SiemensSIMATIC ET 200AL IM 157-1 PN0 to < V1.0.2—
SiemensSIMATIC ET 200MP IM 155-5 PN BA0 to < V4.0.2—
SiemensSIMATIC ET 200MP IM 155-5 PN HF0 to < V4.2.0—
SiemensSIMATIC ET 200MP IM 155-5 PN ST0 to < V4.1.0—
SiemensSIMATIC ET 200SP IM 155-6 PN HF0 to < V4.2.0—
SiemensSIMATIC ET 200SP IM 155-6 PN HS0 to < V4.0.1—
SiemensSIMATIC ET200ecoPN, 4AO U/I 4xM12All versions—
SiemensSIMATIC S7-1500 Software ControllerAll versions < V2.0—
SiemensSIMATIC S7-200 SMARTAll versions < V2.03.01—
SiemensSIMATIC TDC CP51M10 to < V1.1.8—
SiemensSIMATIC TDC CPU5550 to < V1.1.1—
SiemensSIMATIC WinAC RTX 2010All versions < V2010 SP3—
SiemensSIMATIC WinAC RTX F 2010All versions < V2010 SP3—
SiemensSIMOTION CAll versions < V5.1 HF1—
SiemensSIMOTION DAll versions < V5.1 HF1—
SiemensSIMOTION P V4.4 and V4.5All versions < V4.5 HF5—
SiemensSIMOTION P V5All versions < V5.1 HF1—
SiemensSINAMICS DCM w. PNAll versions < V1.4 SP1 HF6—
SiemensSINAMICS DCP w. PNAll versions < V1.2 HF2—
SiemensSINAMICS G110M w. PNAll versions < V4.7 SP9 HF1—
SiemensSINAMICS G120(C/P/D) w. PN (incl. SIPLUS variants)All versions < V4.7 SP9 HF1—
SiemensSINAMICS G130 V4.7 w. PNAll versions < V4.7 HF29—
SiemensSINAMICS G130 V4.8 w. PNAll versions < V4.8 HF4—
SiemensSINAMICS G150 V4.7 w. PNAll versions < V4.7 HF29—
SiemensSINAMICS G150 V4.8 w. PNAll versions < V4.8 HF4—
SiemensSINAMICS GH150 V4.7 w. PROFINETAll versions < V4.7 SP5 HF7—

26 further entries not shown. The complete list is in the raw JSON document.

06 References