The vulnerability of Siemens’ software products lies in insufficient validation of input data, which allows a perpetrator to trigger service failures.

The vulnerability of Siemens’ software products is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures when responding to PROFINET DCP requests with specially crafted packets...