CVE-2017-5706

highpriority · track · 31OT risk · elevatedEPSS 0.007 · 52 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.69% (52nd) EPSS

CVSS 7.2 · high

Is it mine?

5 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC Field-PG M3cisa_csaf_ot
SIMOTION P320-4S: Update to S17.02.06.83.1 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109756438
FixedSIMATIC Field-PG M4cisa_csaf_ot
SIMATIC Field-PG M4: Update to V18.01.06 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109037537
FixedSIMATIC Field-PG M5cisa_csaf_ot
SIMATIC Field-PG M5: Update to V22.01.04 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109738122
FixedSIMATIC HMI IPC677Ccisa_csaf_ot
SIMATIC HMI IPC677C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087
FixedSIMATIC IPC427Dcisa_csaf_ot
SIMATIC IPC427D: Update to V17.0?.10 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/108608500
FixedSIMATIC IPC427Ecisa_csaf_ot
SIMATIC IPC427E: Update to V21.01.07 or higher, which can located here
https://support.industry.siemens.com/cs/ww/en/%20view/109742593
FixedSIMATIC IPC477Dcisa_csaf_ot
SIMATIC IPC477D: Update to V17.0?.10 or higher, which can located here
https://support.industry.siemens.com/cs/ww/en/%20view/108608500
FixedSIMATIC IPC477D PROcisa_csaf_ot
SIMATIC IPC477D PRO: Update to V17.0?.10 or higher, which can located here
https://support.industry.siemens.com/cs/ww/en/%20view/108608500
FixedSIMATIC IPC477Ecisa_csaf_ot
SIMATIC IPC477E: Update to V21.01.07 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109742593
FixedSIMATIC IPC547Dcisa_csaf_ot
SIMATIC IPC547D: Update to V7.1.91.3272 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/67329515
FixedSIMATIC IPC547Ecisa_csaf_ot
SIMATIC IPC547E: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109481624
FixedSIMATIC IPC547Gcisa_csaf_ot
SIMATIC IPC547G: Update to V11.8.50.3425 and R1.21.0 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109750349
FixedSIMATIC IPC627Ccisa_csaf_ot
SIMATIC IPC627C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087
FixedSIMATIC IPC627Dcisa_csaf_ot
SIMATIC IPC627D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109474954
FixedSIMATIC IPC647Ccisa_csaf_ot
SIMATIC IPC647C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792076
FixedSIMATIC IPC647Dcisa_csaf_ot
SIMATIC IPC647D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109037779
FixedSIMATIC IPC677Dcisa_csaf_ot
SIMATIC IPC677D: Install V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109474954
FixedSIMATIC IPC827Ccisa_csaf_ot
SIMATIC IPC827C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087
FixedSIMATIC IPC827Dcisa_csaf_ot
SIMATIC IPC827D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109474954
FixedSIMATIC IPC847Ccisa_csaf_ot
SIMATIC IPC847C: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792076
FixedSIMATIC IPC847Dcisa_csaf_ot
SIMATIC IPC847D: Update to V9.1.41.3024 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109037779
FixedSIMATIC ITP1000cisa_csaf_ot
SIMATIC ITP1000: Update to V23.01.03 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/109748173
FixedSINUMERIK PCU50.5-C WIN7cisa_csaf_ot
SINUMERIK PCU50.5-C, WIN7: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087%20
FixedSINUMERIK PCU50.5-C WINXPcisa_csaf_ot
SINUMERIK PCU50.5-C, WINXP: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087
FixedSINUMERIK PCU50.5-P WIN7cisa_csaf_ot
SINUMERIK PCU50.5-P, WIN7: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087
FixedSINUMERIK PCU50.5-P WINXPcisa_csaf_ot
SINUMERIK PCU50.5-P, WINXP: Update to V6.2.61.3535 or higher, which can be located here
https://support.industry.siemens.com/cs/ww/en/%20view/48792087
MitigationSIMATIC Field-PG M3cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC Field-PG M4cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC Field-PG M5cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC HMI IPC677Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC427Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC427Ecisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC477Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC477D PROcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC477Ecisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC547Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC547Ecisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC547Gcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC627Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC627Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC647Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC647Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC677Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC827Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC827Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC847Ccisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC IPC847Dcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMATIC ITP1000cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSIMOTION P320-4Scisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSINUMERIK PCU50.5-C WIN7cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSINUMERIK PCU50.5-C WINXPcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSINUMERIK PCU50.5-P WIN7cisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security
MitigationSINUMERIK PCU50.5-P WINXPcisa_csaf_ot
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to run the devices in a protected IT environment, Siemens particularly recommends users configure the environment according to Siemens' Operational Guidelines for Industrial Security, and follow the recommendations in the product manuals. See the Operational Guidelines for Industrial Security
https://www.siemens.com/cert/operational-guidelines-industrial-security

cvss

Technical severity, 0–10. One row per scoring source.

8.2

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.07.1highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.2highAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USprimaryCWE-119USCWE-284USCWE-345US

affected products (5)

Products and version ranges known to be affected.

SINUMERIK PCU50.5-P WINXP: ME prior to V6.2.61.3535all versionscisa_csaf_otUS
Siemens SINUMERIK PCU50.5-P WINXP< 6.2.61.3535cisa_csaf_otUS
Intel Corporation Server Platform Services≤ 4.0enisa_euvdEU
Intel Corp. Intel Server Platform Services≤ 4.0fstec_bduRU
intel server platform services firmware= 4.0nvdUScpe:2.3:o:intel:server_platform_services_firmware:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-18-060-01ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)2018-03-01icsa · cisa_csaf_otUS
Siemens ProductCERT reported the vulnerabilities to NCCIC.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd NVD CVE.org MITRE

published 2017-11-21modified 2026-06-17

related (21,044)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-88779US	high7.5OT critical	11.4% (96th)	KEV	2026-10-04
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before…
CVE-2026-88772US	high8.1OT critical	78.2% (100th)	KEV	2026-09-27
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI…
CVE-2026-8452US	critical9.8OT critical	1.01% (63rd)	KEV	2026-06-30
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (…
CVE-2026-53266US	—OT critical	0.93% (61st)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2026-3910US	high8.8OT critical	2.69% (86th)	KEV	2026-03-13
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium s…

+21039 more

references (20)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan