CVE-2017-2684

mediumpriority · track · 37EPSS 0.020 · 81 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.99% (81st) EPSS

CVSS 6.8 · medium

Is it mine?

14 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-27

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC IT Production Suitecisa_csaf_ot
Install SIMATIC Logon update (can be installed without IT Production Suite update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
FixedSIMATIC Logoncisa_csaf_ot
Update to V1.5 SP3 Update 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
FixedSIMATIC PCS 7cisa_csaf_ot
Install SIMATIC Logon update (can be installed without PCS 7 update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
FixedSIMATIC PDMcisa_csaf_ot
Install SIMATIC Logon update (can be installed without PDM update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
FixedSIMATIC WinCCcisa_csaf_ot
Install SIMATIC Logon update (can be installed without WinCC update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966
FixedSIMATIC WinCC Runtime Professionalcisa_csaf_ot
Install SIMATIC Logon update (can be installed without WinCC Runtime Professional update, see compatibility note on download page) - Download: https://support.industry.siemens.com/cs/ww/en/view/109744966
https://support.industry.siemens.com/cs/ww/en/view/109744966

cvss

Technical severity, 0–10. One row per scoring source.

9.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–9

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.09criticalCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.2 · impact 6

v3.09criticalCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:Csecondary · CISA US

v3.08.2highCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-592USCWE-592US

affected products (14)

Products and version ranges known to be affected.

SIMATIC IT Production Suiteall versionscisa_csaf_otUS
SIMATIC Logonall versionscisa_csaf_otUS
SIMATIC PCS 7all versionscisa_csaf_otUS
SIMATIC PDMall versionscisa_csaf_otUS
SIMATIC WinCCall versionscisa_csaf_otUS
SIMATIC WinCC Runtime Professionalall versionscisa_csaf_otUS
Siemens SIMATIC IT Production Suite< V7.1cisa_csaf_otUS
Siemens SIMATIC Logon< V1.5_SP3_Update_2cisa_csaf_otUS
Siemens SIMATIC PCS 7< V8.2_SP1cisa_csaf_otUS
Siemens SIMATIC PDM< V9.1cisa_csaf_otUS
Siemens SIMATIC WinCC< V7.4_SP1cisa_csaf_otUS
Siemens SIMATIC WinCC Runtime Professional< V14_SP1cisa_csaf_otUS
n/a SIMATIC Logon All versions < V1.5 SP3 Update 2SIMATIC Logon All versions → V1.5 SP3 Update 2enisa_euvdEU
siemens simatic logon≤ 1.5nvdUScpe:2.3:a:siemens:simatic_logon:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-17-045-03ICSA-17-045-03 Siemens SIMATIC Authentication Bypass (Update D)2017-02-13icsa · cisa_csaf_otUS
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisa_csaf_ot nvd NVD CVE.org MITRE

published 2017-02-22modified 2026-06-17

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan