VYPR
Get started
← All advisories
Medium severity6.5NVD Advisory· Published May 11, 2017· Updated May 13, 2026

CVE-2017-6865

CVE-2017-6865

Description

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1), SIMATIC STEP 7 V5.X (All versions < V5.6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1), SIMATIC WinCC V7.2 and prior (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Update 15), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (All versions < flexible 2008 SP5), SINAUT ST7CC (All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15), SINEMA Server (All versions < V14), SINUMERIK 808D Programming Tool (All versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Security Configuration Tool (SCT) (All versions < V5.0). Specially crafted PROFINET DCP broadcast packets sent to the affected products on a local Ethernet segment (Layer 2) could cause a Denial-of-Service condition of some services. The services require manual restart to recover.

Affected products

41
  • Siemens Foundation/Pcs 7
    cpe:2.3:a:siemens:pcs_7:-:*:*:*:*:*:*:*
  • Siemens Foundation/Primary Setup Tool
    cpe:2.3:a:siemens:primary_setup_tool:-:*:*:*:*:*:*:*
  • Siemens Foundation/Security Configuration Tool
    cpe:2.3:a:siemens:security_configuration_tool:-:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Automation Tool
    cpe:2.3:a:siemens:simatic_automation_tool:-:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Net Pc Software
    cpe:2.3:a:siemens:simatic_net_pc-software:-:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Step 7 Micro\/win Smart
    cpe:2.3:a:siemens:simatic_step_7_micro\/win_smart:-:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Step 7 \(tia Portal\)3 versions
    cpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):13.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):13.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):14.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):5.0:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Winac Rtx 2010
    cpe:2.3:a:siemens:simatic_winac_rtx_2010:-:sp2:*:*:*:*:*:*
  • Siemens Foundation/Simatic Winac Rtx F 2010
    cpe:2.3:a:siemens:simatic_winac_rtx_f_2010:-:sp2:*:*:*:*:*:*
  • Siemens Foundation/Simatic Wincc
    cpe:2.3:a:siemens:simatic_wincc:-:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Wincc Flexible 2008
    cpe:2.3:a:siemens:simatic_wincc_flexible_2008:-:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Wincc \(tia Portal\)2 versions
    cpe:2.3:a:siemens:simatic_wincc_\(tia_portal\):13.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:simatic_wincc_\(tia_portal\):13.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc_\(tia_portal\):14.0:*:*:*:*:*:*:*
  • Siemens Foundation/Sinaut St7cc
    cpe:2.3:a:siemens:sinaut_st7cc:-:*:*:*:*:*:*:*
  • Siemens Foundation/Sinema Server
    cpe:2.3:a:siemens:sinema_server:-:*:*:*:*:*:*:*
  • Siemens Foundation/Sinumerik 808d Programming Tool
    cpe:2.3:a:siemens:sinumerik_808d_programming_tool:-:*:*:*:*:*:*:*
  • Siemens Foundation/Smart Pc Access
    cpe:2.3:a:siemens:smart_pc_access:2.0:*:*:*:*:*:*:*
  • Siemens AG/Primary Setup Tool (PST)v5
    Range: All versions < V4.2 HF1
  • Siemens AG/Security Configuration Tool (SCT)v5
    Range: All versions < V5.0
  • Siemens AG/SIMATIC Automation Toolv5
    Range: All versions < V3.0
  • Siemens AG/SIMATIC NET PC-Softwarev5
    Range: All versions < V14 SP1
  • Siemens AG/SIMATIC PCS 7 V8.1v5
    Range: All versions
  • Siemens AG/SIMATIC PCS 7 V8.2v5
    Range: All versions < V8.2 SP1
  • Siemens AG/SIMATIC STEP 7 (TIA Portal) V13v5
    Range: All versions < V13 SP2
  • Siemens AG/SIMATIC STEP 7 (TIA Portal) V14v5
    Range: All versions < V14 SP1
  • Siemens AG/SIMATIC STEP 7 V5.Xv5
    Range: All versions < V5.6
  • Siemens AG/SIMATIC WinAC RTX 2010 SP2v5
    Range: All versions
  • Siemens AG/SIMATIC WinAC RTX F 2010 SP2v5
    Range: All versions
  • Siemens AG/SIMATIC WinCC flexible 2008v5
    Range: All versions < flexible 2008 SP5
  • Siemens AG/SIMATIC WinCC (TIA Portal) V13v5
    Range: All versions < V13 SP2
  • Siemens AG/SIMATIC WinCC (TIA Portal) V14v5
    Range: All versions < V14 SP1
  • Siemens AG/SIMATIC WinCC V7.2 and priorv5
    Range: All versions
  • Siemens AG/SIMATIC WinCC V7.3v5
    Range: All versions < V7.3 Update 15
  • Siemens AG/SIMATIC WinCC V7.4v5
    Range: All versions < V7.4 SP1 Upd1
  • Siemens AG/SINAUT ST7CCv5
    Range: All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15
  • Siemens AG/SINEMA Serverv5
    Range: All versions < V14
  • Siemens AG/SINUMERIK 808D Programming Toolv5
    Range: All versions < V4.7 SP4 HF2
  • Siemens AG/SMART PC Accessv5
    Range: All versions < V2.3
  • Siemens AG/STEP 7 - Micro/WIN SMARTv5
    Range: All versions < V2.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.