CVE-2017-6865

mediumpriority · track · 26EPSS 0.005 · 40 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.47% (40th) EPSS

CVSS 6.1 · medium

Is it mine?

104 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1), SIMATIC STEP 7 V5.X (All versions < V5.6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1), SIMATIC WinCC V7.2 and prior (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Update 15), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (All versions < flexible 2008 SP5), SINAUT ST7CC (All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15), SINEMA Server (All versions < V14), SINUMERIK 808D Programming Tool (All versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Security Configuration Tool (SCT) (All versions < V5.0). Specially crafted PROFINET DCP broadcast packets sent to the affected products on a local Ethernet segment (Layer 2) could cause a Denial-of-Service condition of some services. The services require manual restart to recover.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedPrimary Setup Tool (PST)cisa_csaf_ot
Update to V4.2 HF1 - Download: https://support.industry.siemens.com/cs/ww/en/view/19440762
https://support.industry.siemens.com/cs/ww/en/view/19440762
FixedSIMATIC Automation Toolcisa_csaf_ot
Update to V3.0 - Download: https://support.industry.siemens.com/cs/ww/en/view/98161300
https://support.industry.siemens.com/cs/ww/en/view/98161300
FixedSIMATIC NET PC-Softwarecisa_csaf_ot
Upgrade to V14 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747482
https://support.industry.siemens.com/cs/ww/en/view/109747482
FixedSIMATIC PCS 7 V8.1 and earlier versionscisa_csaf_ot
See recommendations from section Workarounds and Mitigations, or upgrade to V9.0 - Download: https://www.siemens.de/automation/partner
https://www.siemens.de/automation/partner
FixedSIMATIC STEP 7 (TIA Portal) V13cisa_csaf_ot
Update to V13 SP 2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745155
https://support.industry.siemens.com/cs/ww/en/view/109745155
FixedSIMATIC STEP 7 (TIA Portal) V14cisa_csaf_ot
Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745984
https://support.industry.siemens.com/cs/ww/en/view/109745984
FixedSIMATIC STEP 7 V5.Xcisa_csaf_ot
Update to V5.6 - Download: https://support.industry.siemens.com/cs/ww/en/view/109747706
https://support.industry.siemens.com/cs/ww/en/view/109747706
FixedSIMATIC WinAC RTX (F) 2010 SP2cisa_csaf_ot
Update to SIMATIC WinAC RTX 2010 SP3 and apply BIOS and Microsoft Windows updates - Download: https://support.industry.siemens.com/cs/ww/en/view/109765109
https://support.industry.siemens.com/cs/ww/en/view/109765109
FixedSIMATIC WinCC (TIA Portal) V13cisa_csaf_ot
Update to V13 SP2 - Download: https://support.industry.siemens.com/cs/ww/en/view/109746073
https://support.industry.siemens.com/cs/ww/en/view/109746073
FixedSIMATIC WinCC (TIA Portal) V14cisa_csaf_ot
Update to V14 SP 1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109745460
https://support.industry.siemens.com/cs/ww/en/view/109745460
FixedSIMATIC WinCC V7.3cisa_csaf_ot
Update to V7.3 Update 15 - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182
https://support.industry.siemens.com/cs/ww/en/view/109750182
FixedSIMATIC WinCC V7.4cisa_csaf_ot
Update to V7.4 SP1 Upd1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748024
https://support.industry.siemens.com/cs/ww/en/view/109748024
FixedSIMATIC WinCC flexible 2008cisa_csaf_ot
Upgrade to WinCC flexible 2008 SP5 - Download: https://support.industry.siemens.com/cs/ww/en/view/109749111
https://support.industry.siemens.com/cs/ww/en/view/109749111
FixedSINAUT ST7CCcisa_csaf_ot
15 Update SIMATIC WinCC to V7.3 Update 15 or newer - Download: https://support.industry.siemens.com/cs/ww/en/view/109750182
https://support.industry.siemens.com/cs/ww/en/view/109750182
FixedSINEMA Servercisa_csaf_ot
Upgrade to V14 - Download: https://support.industry.siemens.com/cs/ww/en/view/109748854
https://support.industry.siemens.com/cs/ww/en/view/109748854
FixedSMART PC Accesscisa_csaf_ot
Update to V2.3 - Download: SMART PC Access V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/
https://w3.siemens.com/aspa
FixedSTEP 7 - Micro/WIN SMARTcisa_csaf_ot
Update to V2.3 - Download: Micro/WIN SMART V2.3 can be obtained by contacting your local Siemens representative or customer support: https://w3.siemens.com/aspa_app/
https://w3.siemens.com/aspa
FixedSecurity Configuration Tool (SCT)cisa_csaf_ot
Update to V5.0 - Download: https://support.industry.siemens.com/cs/de/en/view/109747539
https://support.industry.siemens.com/cs/de/en/view/109747539
MitigationPrimary Setup Tool (PST)cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC Automation Toolcisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC NET PC-Softwarecisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC PCS 7 V8.1 and earlier versionscisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC PCS 7 V8.2cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC STEP 7 (TIA Portal) V13cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC STEP 7 (TIA Portal) V14cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC STEP 7 V5.Xcisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC WinAC RTX (F) 2010 SP2cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC WinCC (TIA Portal) V13cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC WinCC (TIA Portal) V14cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC WinCC V7.2 and priorcisa_csaf_ot
See recommendations from section Workaround and Mitigations
MitigationSIMATIC WinCC V7.3cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC WinCC V7.4cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSIMATIC WinCC flexible 2008cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSINAUT ST7CCcisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSINEMA Servercisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSINUMERIK 808D Programming Toolcisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSMART PC Accesscisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSTEP 7 - Micro/WIN SMARTcisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth
MitigationSecurity Configuration Tool (SCT)cisa_csaf_ot
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Apply Defense-in-Depth

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.06.1mediumAV:A/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 6.5 · impact 6.9

v3.06.5mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.06.5mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.06mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USprimaryCWE-20USCWE-20US

affected products (104)

Products and version ranges known to be affected.

Primary Setup Tool (PST)all versionscisa_csaf_otUS
SIMATIC Automation Toolall versionscisa_csaf_otUS
SIMATIC NET PC-Softwareall versionscisa_csaf_otUS
SIMATIC PCS 7 V8.1 and earlier versionsall versionscisa_csaf_otUS
SIMATIC PCS 7 V8.2all versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V13all versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V14all versionscisa_csaf_otUS
SIMATIC STEP 7 V5.Xall versionscisa_csaf_otUS
SIMATIC WinAC RTX (F) 2010 SP2all versionscisa_csaf_otUS
SIMATIC WinCC (TIA Portal) V13all versionscisa_csaf_otUS
SIMATIC WinCC (TIA Portal) V14all versionscisa_csaf_otUS
SIMATIC WinCC V7.2 and priorall versionscisa_csaf_otUS
SIMATIC WinCC V7.3all versionscisa_csaf_otUS
SIMATIC WinCC V7.4all versionscisa_csaf_otUS
SIMATIC WinCC flexible 2008all versionscisa_csaf_otUS
SINAUT ST7CCall versionscisa_csaf_otUS
SINEMA Serverall versionscisa_csaf_otUS
SINUMERIK 808D Programming Toolall versionscisa_csaf_otUS
SMART PC Accessall versionscisa_csaf_otUS
STEP 7 - Micro/WIN SMARTall versionscisa_csaf_otUS

showing 20 of 104

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-17-129-01ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)2017-05-08icsa · cisa_csaf_otUS
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

published 2017-05-11modified 2026-06-17

related (25,176)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-88771US	critical9.8OT critical	82.2% (100th)	KEV	2026-09-27
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS,…
CVE-2026-93952US	—OT critical	1.38% (72nd)	KEV	2026-09-22
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successf…
CVE-2026-12569US	critical9.8OT critical	46.0% (99th)	KEV	2026-06-18
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of u…
CVE-2026-34910US	—OT critical	90.0% (100th)	KEV	2026-05-22
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVE-2026-6973US	—OT critical	34.5% (98th)	KEV	2026-05-07
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code…

+25171 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan