CVE-2017-9945 in 7KM PAC Switched Ethernet PROFINET Expansion Module
Summary
In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/26/2017
Disclosure
08/30/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 106013 | Siemens 7KM PAC Switched Ethernet PROFINET Expansion Module PROFINET DCP Packet input validation | 20 | Not defined | Workaround | CVE-2017-9945 |