CVE:CVE-2017-2680
CNNVD:CNNVD-201705-574
Siemens SIMATIC是西门子（Siemens）的一款组态软件。
Siemens SIMATIC 中存在资源管理错误漏洞。攻击者可借助特制的PROFINET DCP broadcast (Layer 2 - Ethernet)数据包利用该漏洞造成拒绝服务。以下产品和版本受到影响：Siemens Extension Unit 12" PROFINET V01.01.01之前版本；Extension Unit 15" PROFINET V01.01.01之前版本；Extension Unit 19" PROFINET V01.01.01之前版本；Extension Unit 22" PROFINET V01.01.01之前版本；SIMATIC CP 1242-7 GPRS V2 V2.1.82之前版本；SIMATIC CP 1243-7 LTE/US V2.1.82之前版本；SIMATIC CP 1243-8 V2.1.82之前版本；SIMATIC CP 1626 V1.1之前版本。
solution:Upgrade siemens simatic_cp_343-1_std_firmware to a higher version than 3.1.3,and avoid the version (,3.1.3); Upgrade siemens simatic_cp_343-1_lean_firmware to a higher version than 3.1.3,and avoid the version (,3.1.3); Upgrade siemens simatic_cp_343-1_adv_firmware to a higher version than *; Upgrade siemens simatic_cp_443-1_std_firmware to a higher version than 3.2.17,and avoid the version (,3.2.17); Upgrade siemens simatic_cp_443-1_adv_firmware to a higher version than 3.2.17,and avoid the version (,3.2.17); Upgrade siemens simatic_cp_443-1_opc-ua_firmware to a higher version than *; Upgrade siemens simatic_cp_1243-1_firmware to a higher version than 2.1.82,and avoid the version (,2.1.82); Upgrade siemens simatic_cm_1542-1_firmware to a higher version than 2.0,and avoid the version (,2.0); Upgrade siemens simatic_cp_1542sp-1_firmware to a higher version than 1.0.15,and avoid the version (,1.0.15); Upgrade siemens simatic_cp_1542sp-1_irc_firmware to a higher version than 1.0.15,and avoid the version (,1.0.15); Upgrade siemens simatic_cp_1543sp-1_firmware to a higher version than 1.0.15,and avoid the version (,1.0.15); Upgrade siemens simatic_cp_1543-1_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_rf650r_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens simatic_rf680r_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens simatic_rf685r_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens simatic_cp_1616_firmware to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens simatic_cp_1604_firmware to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens simatic_dk-1616_pn_io_firmware to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens scalance_x200_firmware to a higher version than 5.2.2,and avoid the version (,5.2.2); Upgrade siemens scalance_x200_irt_firmware to a higher version than 5.4.0,and avoid the version (,5.4.0); Upgrade siemens scalance_x300_firmware to a higher version than 4.1.0,and avoid the version (,4.1.0); Upgrade siemens scalance_x408_firmware to a higher version than 4.1.0,and avoid the version (,4.1.0); Upgrade siemens scalance_x414_firmware to a higher version than 3.10.2,and avoid the version (,3.10.2); Upgrade siemens scalance_xm400_firmware to a higher version than 6.1,and avoid the version (,6.1); Upgrade siemens scalance_xr500_firmware to a higher version than 6.1,and avoid the version (,6.1); Upgrade siemens scalance_w700_firmware to a higher version than 6.1,and avoid the version (,6.1); Upgrade siemens scalance_m-800_firmware to a higher version than 4.03,and avoid the version (,4.03); Upgrade siemens scalance_s615_firmware to a higher version than 4.03,and avoid the version (,4.03); Upgrade siemens softnet_profinet_io_firmware to a higher version than 14,14,and avoid the version (,14),14; Upgrade siemens ie/pb-link_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens ie/as-i_link_pn_io_firmware to a higher version than *; Upgrade siemens simatic_teleservice_adapter_ie_standard_firmware to a higher version than *; Upgrade siemens simatic_teleservice_adapter_ie_basic_firmware to a higher version than *; Upgrade siemens simatic_teleservice_adapter_ie_advanced_firmware to a higher version than *; Upgrade siemens sitop_psu8600_firmware to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade siemens ups1600_profinet_firmware to a higher version than 2.2.0,and avoid the version (,2.2.0); Upgrade siemens simatic_et_200al_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2); Upgrade siemens simatic_et_200ecopn_firmware to a higher version than *; Upgrade siemens simatic_et_200m_firmware to a higher version than *; Upgrade siemens simatic_et_200mp_firmware to a higher version than 4.0.1,and avoid the version (,4.0.1); Upgrade siemens simatic_et_200pro_firmware to a higher version than *; Upgrade siemens simatic_et_200s_firmware to a higher version than *; Upgrade siemens simatic_et_200sp_firmware to a higher version than 4.1.0,and avoid the version (,4.1.0); Upgrade siemens pn/pn_coupler_firmware to a higher version than 4.0,and avoid the version (,4.0); Upgrade siemens dk_standard_ethernet_controller_firmware to a higher version than 4.1.1,4.1.1,and avoid the version (,4.1.1),4.1.1; Upgrade siemens ek-ertec_200p_pn_io_firmware to a higher version than 4.4.0,4.4.0,and avoid the version (,4.4.0),4.4.0; Upgrade siemens ek-ertec_200_pn_io_firmware to a higher version than 4.2.1,4.2.1,and avoid the version (,4.2.1),4.2.1; Upgrade siemens simatic_s7-200_smart_firmware to a higher version than 2.3,and avoid the version (,2.3); Upgrade siemens simatic_s7-300_firmware to a higher version than -; Upgrade siemens simatic_s7-400_firmware to a higher version than 6.0.6,and avoid the version (,6.0.6); Upgrade siemens simatic_s7-1200_firmware to a higher version than 4.2.1,and avoid the version (,4.2.1); Upgrade siemens simatic_s7-1500_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_s7-1500_software_controller_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_winac_rtx_firmware to a higher version than 2010,2010,and avoid the version (,2010),2010; Upgrade siemens sirius_act_3su1_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0); Upgrade siemens sirius_soft_starter_3rw44_pn_firmware to a higher version than *; Upgrade siemens sirius_motor_starter_m200d_profinet_firmware to a higher version than *; Upgrade siemens simocode_pro_v_profinet_firmware to a higher version than 2.0.0,and avoid the version (,2.0.0); Upgrade siemens sinamics_dcm_firmware to a higher version than 1.4,1.4,1.4:sp1,and avoid the version (,1.4),1.4,1.4:sp1; Upgrade siemens sinamics_dcp_firmware to a higher version than 1.2,1.2,and avoid the version (,1.2),1.2; Upgrade siemens sinamics_g110m_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_g120(c/p/d)_w._pn_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_g130_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_g150_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics__s110_pn_firmware to a higher version than 4.4,4.4,and avoid the version (,4.4),4.4; Upgrade siemens sinamics_s120_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_s150_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_v90_pn_firmware to a higher version than 1.01,and avoid the version (,1.01); Upgrade siemens simotion_firmware to a higher version than 4.5,4.5,and avoid the version (,4.5),4.5; Upgrade siemens sinumerik_828d_firmware to a higher version than 4.5,4.5,and avoid the version (,4.5),4.5; Upgrade siemens sinumerik_840d_sl_firmware to a higher version than 4.5,4.5,and avoid the version (,4.5),4.5; Upgrade siemens simatic_hmi_comfort_panels to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_multi_panels to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_mobile_panels to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_cp_1243-1_irc_firmware to a higher version than 2.1.82,and avoid the version (,2.1.82); Upgrade siemens simatic_cp_1243-1_iec_firmware to a higher version than *; Upgrade siemens simatic_cp_1243-1_dnp3_firmware to a higher version than *; Upgrade siemens simatic_dk-1604_pn_io_firmware to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens simatic_tdc_cpu555_firmware to a higher version than 1.1.1,and avoid the version (,1.1.1); Upgrade siemens simatic_tdc_cp51m1_firmware to a higher version than 1.1.8,and avoid the version (,1.1.8); Upgrade siemens sinamics_gh150_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_gl150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_gm150_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_sl150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_sm120_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens extension_unit_12_profinet_firmware to a higher version than 01.01.01,and avoid the version (,01.01.01); Upgrade siemens extension_unit_15_profinet_firmware to a higher version than 01.01.01,and avoid the version (,01.01.01); Upgrade siemens extension_unit_19_profinet_firmware to a higher version than 01.01.01,and avoid the version (,01.01.01); Upgrade siemens extension_unit_22_profinet_firmware to a higher version than 01.01.01,and avoid the version (,01.01.01); Upgrade siemens simatic_cp_1242-7_gprs_firmware to a higher version than 2.1.82,and avoid the version (,2.1.82); Upgrade siemens simatic_cp_1243-7_lte/us_firmware to a higher version than 2.1.82,and avoid the version (,2.1.82); Upgrade siemens simatic_cp_1243-8_firmware to a higher version than 2.1.82,and avoid the version (,2.1.82); Upgrade siemens simatic_cp_1626_firmware to a higher version than 1.1,and avoid the version (,1.1)