CVE-2017-6865

mediumPriorität · verfolgen · 26EPSS 0.005 · 40. PerzentilEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.47% (40th) EPSS
CVSS 6.1 · medium
Is it mine?
104 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1), SIMATIC STEP 7 V5.X (All versions < V5.6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1), SIMATIC WinCC V7.2 and prior (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Update 15), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (All versions < flexible 2008 SP5), SINAUT ST7CC (All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15), SINEMA Server (All versions < V14), SINUMERIK 808D Programming Tool (All versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Security Configuration Tool (SCT) (All versions < V5.0). Specially crafted PROFINET DCP broadcast packets sent to the affected products on a local Ethernet segment (Layer 2) could cause a Denial-of-Service condition of some services. The services require manual restart to recover.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenPrimary Setup Tool (PST)cisa_csaf_ot

    Update to V4.2 HF1 - Download: https://support.industry.siemens.com/cs/ww/en/view/19440762

    https://support.industry.siemens.com/cs/ww/en/view/19440762
  • BehobenSIMATIC Automation Toolcisa_csaf_ot

    Update to V3.0 - Download: https://support.industry.siemens.com/cs/ww/en/view/98161300

    https://support.industry.siemens.com/cs/ww/en/view/98161300
  • BehobenSIMATIC NET PC-Softwarecisa_csaf_ot

    Upgrade to V14 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747482

    https://support.industry.siemens.com/cs/ww/en/view/109747482
  • BehobenSIMATIC PCS 7 V8.1 and earlier versionscisa_csaf_ot

    See recommendations from section Workarounds and Mitigations, or upgrade to V9.0 - Download: https://www.siemens.de/automation/partner

    https://www.siemens.de/automation/partner
  • BehobenSIMATIC STEP 7 (TIA Portal) V13cisa_csaf_ot

    Update to V13 SP 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745155

    https://support.industry.siemens.com/cs/ww/en/view/109745155
  • BehobenSIMATIC STEP 7 (TIA Portal) V14cisa_csaf_ot

    Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745984

    https://support.industry.siemens.com/cs/ww/en/view/109745984
  • BehobenSIMATIC STEP 7 V5.Xcisa_csaf_ot

    Update to V5.6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747706

    https://support.industry.siemens.com/cs/ww/en/view/109747706
  • BehobenSIMATIC WinAC RTX (F) 2010 SP2cisa_csaf_ot

    Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates - Download: https://support.industry.siemens.com/cs/ww/en/view/109765109

    https://support.industry.siemens.com/cs/ww/en/view/109765109
  • BehobenSIMATIC WinCC (TIA Portal) V13cisa_csaf_ot

    Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746073

    https://support.industry.siemens.com/cs/ww/en/view/109746073
  • BehobenSIMATIC WinCC (TIA Portal) V14cisa_csaf_ot

    Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745460

    https://support.industry.siemens.com/cs/ww/en/view/109745460
  • BehobenSIMATIC WinCC V7.3cisa_csaf_ot

    Update to V7.3 Update 15 - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182

    https://support.industry.siemens.com/cs/ww/en/view/109750182
  • BehobenSIMATIC WinCC V7.4cisa_csaf_ot

    Update to V7.4 SP1 Upd1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748024

    https://support.industry.siemens.com/cs/ww/en/view/109748024
  • BehobenSIMATIC WinCC flexible 2008cisa_csaf_ot

    Upgrade to WinCC flexible 2008 SP5 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749111

    https://support.industry.siemens.com/cs/ww/en/view/109749111
  • BehobenSINAUT ST7CCcisa_csaf_ot

    15 Update SIMATIC WinCC to V7.3 Update 15 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182

    https://support.industry.siemens.com/cs/ww/en/view/109750182
  • BehobenSINEMA Servercisa_csaf_ot

    Upgrade to V14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748854

    https://support.industry.siemens.com/cs/ww/en/view/109748854
  • BehobenSMART PC Accesscisa_csaf_ot

    Update to V2.3 - Download: SMART PC Access V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/

    https://w3.siemens.com/aspa
  • BehobenSTEP 7 - Micro/WIN SMARTcisa_csaf_ot

    Update to V2.3 - Download: Micro/WIN SMART V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/

    https://w3.siemens.com/aspa
  • BehobenSecurity Configuration Tool (SCT)cisa_csaf_ot

    Update to V5.0 - Download: https://support.industry.siemens.com/cs/de/en/view/109747539

    https://support.industry.siemens.com/cs/de/en/view/109747539
  • MitigationPrimary Setup Tool (PST)cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC Automation Toolcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC NET PC-Softwarecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC PCS 7 V8.1 and earlier versionscisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC PCS 7 V8.2cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC STEP 7 (TIA Portal) V13cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC STEP 7 (TIA Portal) V14cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC STEP 7 V5.Xcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC WinAC RTX (F) 2010 SP2cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC WinCC (TIA Portal) V13cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC WinCC (TIA Portal) V14cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC WinCC V7.2 and priorcisa_csaf_ot

    See recommendations from section Workaround and Mitigations

  • MitigationSIMATIC WinCC V7.3cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC WinCC V7.4cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSIMATIC WinCC flexible 2008cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSINAUT ST7CCcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSINEMA Servercisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSINUMERIK 808D Programming Toolcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSMART PC Accesscisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSTEP 7 - Micro/WIN SMARTcisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

  • MitigationSecurity Configuration Tool (SCT)cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.06.1mediumAV:A/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 6.5 · Auswirkung 6.9
v3.06.5mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6
v3.06.5mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.06mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
v3.16.5mediumAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USprimärCWE-20USCWE-20US
04

betroffene Produkte (104)

Betroffene Produkte und Versionsbereiche.

20 von 104 angezeigt
05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-17-129-01ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)2017-05-08icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2017-05-11geändert 2026-06-17
09

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan