CVE-2017-2680: Siemens Dk Standard Ethernet Controller Firmware

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.

Affected products

  • Siemens Dk Standard Ethernet Controller Firmware: before 4.1.1 (fixed in 4.1.1); version 4.1.1 only
  • Siemens Ek-Ertec 200 Pn Io Firmware: before 4.2.1 (fixed in 4.2.1); version 4.2.1 only
  • Siemens Ek-Ertec 200p Pn Io Firmware: before 4.4.0 (fixed in 4.4.0); version 4.4.0 only
  • Siemens Extension Unit 12 Profinet Firmware: before 01.01.01 (fixed in 01.01.01)
  • Siemens Extension Unit 15 Profinet Firmware: before 01.01.01 (fixed in 01.01.01)
  • Siemens Extension Unit 19 Profinet Firmware: before 01.01.01 (fixed in 01.01.01)
  • Siemens Extension Unit 22 Profinet Firmware: before 01.01.01 (fixed in 01.01.01)
  • Siemens Ie/as-I Link Pn Io Firmware: any version
  • Siemens Ie/pb-Link Firmware: before 3.0 (fixed in 3.0)
  • Siemens Pn/pn Coupler Firmware: before 4.0 (fixed in 4.0)
  • Siemens Scalance M-800 Firmware: before 4.03 (fixed in 4.03)
  • Siemens Scalance s615 Firmware: before 4.03 (fixed in 4.03)
  • Siemens Scalance w700 Firmware: before 6.1 (fixed in 6.1)
  • Siemens Scalance x200 Firmware: before 5.2.2 (fixed in 5.2.2)
  • Siemens Scalance x200 Irt Firmware: before 5.4.0 (fixed in 5.4.0)
  • Siemens Scalance x300 Firmware: before 4.1.0 (fixed in 4.1.0)
  • Siemens Scalance x408 Firmware: before 4.1.0 (fixed in 4.1.0)
  • Siemens Scalance x414 Firmware: before 3.10.2 (fixed in 3.10.2)
  • Siemens Scalance XM400 Firmware: before 6.1 (fixed in 6.1)
  • Siemens Scalance XR500 Firmware: before 6.1 (fixed in 6.1)
  • Siemens SIMATIC Cm 1542-1 Firmware: before 2.0 (fixed in 2.0)
  • Siemens SIMATIC CP 1242-7 Gprs Firmware: before 2.1.82 (fixed in 2.1.82)
  • Siemens SIMATIC CP 1243-1 DNP3 Firmware: any version
  • Siemens SIMATIC CP 1243-1 Firmware: before 2.1.82 (fixed in 2.1.82)
  • Siemens SIMATIC CP 1243-1 Iec Firmware: any version
  • and 68 more

Published 2017-05-11. Last modified 2026-06-17.