Siemens Simatic ET 200M (Incl. Siplus Variants) vulnerabilities
5 vulnerabilities
Known vulnerabilities in Siemens Simatic ET 200M (Incl. Siplus Variants), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-2681siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+174
EPSS score0.91%
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.CVE-2017-2680siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+200EPSS score1.15%
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.CVE-2017-12741siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+118EPSS score3.31%
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.CVE-2019-10936siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+139EPSS score2.07%
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.CVE-2019-10923siemenscp1604_firmware+110EPSS score1.40%
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.