CVE-2017-2680

CVE-2017-2680 is the Siemens PROFINET DCP Denial of Service vulnerability. Specially crafted PROFINET DCP broadcast packets can cause DoS on affected devices on a local Ethernet (Layer 2) segment, with recovery requiring human interaction. PROFIBUS interfaces are not affected. Affected products i...

CVE-2019-10936

Siemens PROFINET devices (e.g., SIMATIC ET200S/ET200SP and related ecosystem listed in the advisory plugins) are affected by CVE-2019-10936. The root cause is handling large amounts of specially crafted UDP packets, enabling an unauthenticated remote attacker to trigger a denial-of-service condit...

CVE-2019-10923

CVE-2019-10923 affects Siemens Industrial Real-Time devices (e.g., CP1604/CP1616, PROFINET IO DK/EK-ERTEC kits, SCALANCE X‑200IRT, ET200 family, SIMATIC S7-300/400 CPUs, ET200S/ET200M, etc.). A remote attacker with network access can cause a denial of service by breaking the real‑time synchroniza...

CVE-2017-2681

CVE-2017-2681 affects Siemens PROFINET DCP; specially crafted DCP packets on a local Layer-2 Ethernet can cause denial of service in affected devices. The issue primarily impacts SIMATIC HMI Multi Panels, HMI Mobile Panels, and S7-300/S7-400 families, plus a wide range of PROFINET-enabled product...

CVE-2017-12741

CVE-2017-12741 corresponds to an Improper Input Validation (CWE-20) vulnerability in Siemens industrial products. The issue allows specially crafted UDP packets to port 161/UDP to trigger a denial-of-service condition, with exposed devices requiring manual restart. Affected products include PROFI...