Siemens Sinamics Sl150 V4.7.4 W. Profinet vulnerabilities
2 vulnerabilities
Known vulnerabilities in Siemens Sinamics Sl150 V4.7.4 W. Profinet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-2680siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+200
EPSS score1.15%
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.CVE-2017-12741siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+118EPSS score3.31%
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.