First published: Tue Jul 31 2012(Updated: )
Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and service outage) via (1) malformed HTTP traffic or (2) malformed IP packets.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens SIMATIC S7-400 CPU | =5.0 | |
Siemens SIMATIC S7-400 CPU 414-3 pn/dp | ||
Siemens SIMATIC S7-400 CPU 416-3 PN/DP | ||
Siemens SIMATIC S7-400 CPU 416f-3 pn/dp |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-3017 is classified as having a high severity due to its potential to cause denial of service in Siemens SIMATIC S7-400 PN CPU devices.
To mitigate CVE-2012-3017, it is recommended to upgrade the firmware of the affected Siemens SIMATIC S7-400 PN CPU devices to a secure version.
CVE-2012-3017 allows remote attackers to execute attacks that lead to denial of service via malformed HTTP traffic or malformed IP packets.
CVE-2012-3017 affects Siemens SIMATIC S7-400 PN CPU devices running firmware version 5.x, including specific models like 414-3 PN/DP and 416-3 PN/DP.
The consequences of CVE-2012-3017 include potential defect-mode transition and service outages, impacting operational continuity.