ByteOS Network

Vulnerability Details :

CVE-2014-1966

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-24 Feb, 2014 | 02:00

Updated At-06 Aug, 2024 | 09:58

The SNMP implementation in Siemens RuggedCom ROS before 3.11, ROS 3.11 for RS950G, ROS 3.12 before 3.12.4, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (device outage) via crafted packets.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:24 Feb, 2014 | 02:00

Updated At:06 Aug, 2024 | 09:58

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf	x_refsource_CONFIRM
http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03	x_refsource_MISC

Hyperlink: http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf

Resource:

x_refsource_CONFIRM

Hyperlink: http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf	x_refsource_CONFIRM x_transferred
http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03	x_refsource_MISC x_transferred

Hyperlink: http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:24 Feb, 2014 | 04:48

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 2.0

Base score: 7.8

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

Siemens AG

>>ruggedcom_rugged_operating_system>>Versions before 3.11.0(exclusive)

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_rugged_operating_system>>Versions from 3.12(inclusive) to 3.12.4(exclusive)

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_rugged_operating_system>>Versions between 3.11.0(exclusive) and 3.11.5(exclusive)

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_rs950g>>-

cpe:2.3:h:siemens:ruggedcom_rs950g:-:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_rugged_operating_system>>Versions between 4.0(exclusive) and 4.1.0(exclusive)

cpe:2.3:o:siemens:ruggedcom_rugged_operating_system:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_rsg2488>>-

cpe:2.3:h:siemens:ruggedcom_rsg2488:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03	cve@mitre.org	Permissions Required Third Party Advisory US Government Resource
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf	cve@mitre.org	Broken Link Vendor Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03	af854a3a-2127-422b-91ae-364da2661108	Permissions Required Third Party Advisory US Government Resource
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf	af854a3a-2127-422b-91ae-364da2661108	Broken Link Vendor Advisory

Hyperlink: http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03

Source: cve@mitre.org

Resource:

Permissions Required

Third Party Advisory

US Government Resource

Hyperlink: http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf

Source: cve@mitre.org

Resource:

Broken Link

Vendor Advisory

Hyperlink: http://ics-cert.us-cert.gov/advisories/ICSA-14-051-03

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Permissions Required

Third Party Advisory

US Government Resource

Hyperlink: http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892342.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Vendor Advisory

Similar CVEs

58Records found

CVE-2016-3949

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-4.87% / 89.14%

7 Day CHG~0.00%

Published-27 Jun, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service (defect-mode transition) via crafted (1) ISO-TSAP or (2) Profibus packets.

Vendor-n/a Siemens AG

Product-simatic_s7-300_with_profitnet_support_firmware simatic_s7-300_without_profitnet_support_firmware simatic_s7-300_with_profitnet_support simatic_s7-300_without_profitnet_support n/a

CVE-2019-13926

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.24% / 46.69%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionality of the device.

Vendor-Siemens AG

Product-scalance_s623 scalance_s612_firmware scalance_s627-2m_firmware scalance_s602 scalance_s627-2m scalance_s602_firmware scalance_s623_firmware scalance_s612 SCALANCE S627-2M SCALANCE S623 SCALANCE S602 SCALANCE S612

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-13946

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.55% / 67.00%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Vendor-Siemens AG

Product-simatic_et200al_im_157-1_pn_firmware simatic_rf182c scalance_xr526 simatic_et200m_im153-4_pn_io_hf_firmware scalance_xr552_firmware simatic_et200mp_im155-5_pn_st_firmware scalance_xr552 simatic_cp_1616 ruggedcom_rm1224_firmware simatic_cp_1604 simatic_et200sp_im155-6_pn_hf dk_standard_ethernet_controller scalance_xr-300wg scalance_xp-200 simatic_et200mp_im155-5_pn_hf_firmware scalance_xf-200ba simatic_ipc_support scalance_x-400_firmware scalance_x-300 scalance_x-200irt simatic_cp_443-1 simatic_cp_343-1_erpc scalance_xf-200_firmware scalance_xf-200 simatic_et200sp_im155-6_pn_basic simatic_et200sp_im155-6_pn_hf_firmware scalance_s615_firmware simatic_cp_1616_firmware scalance_xr524_firmware scalance_w700_ieee_802.11n_firmware scalance_m-800_firmware simatic_et200m_im153-4_pn_io_st_firmware simatic_cp_443-1_advanced_firmware scalance_xc-200_firmware profinet_driver simatic_cp_343-1 simatic_et200al_im_157-1_pn im_154-3_pn_hf simatic_cp_343-1_lean_firmware simatic_mv420_firmware scalance_xr-300wg_firmware simatic_mv420 im_154-4_pn_hf simatic_et200ecopn scalance_x-200irt_firmware simatic_et200s_firmware scalance_xr526_firmware scalance_x-300_firmware ek-ertec_200 scalance_xr524 simatic_rf600 simatic_cp_443-1_opc_ua ek-ertec_200_firmware sinamics_dcp_firmware simatic_cp_443-1_advanced simatic_mv440 simatic_cp_343-1_firmware scalance_xm-400 simatic_et200pro_firmware simatic_cp_343-1_lean scalance_xf-200ba_firmware simatic_et200ecopn_firmware ek-ertec_200p_firmware scalance_xr528_firmware scalance_xr528 simatic_rf180c simatic_mv440_firmware ruggedcom_rm1224 scalance_x-400 simatic_cp_1604_firmware scalance_s615 im_154-4_pn_hf_firmware simatic_cp_343-1_advanced_firmware simatic_cp_443-1_opc_ua_firmware simatic_rf600_firmware scalance_w700_ieee_802.11n simatic_pn\/pn_coupler_firmware simatic_et200m_im153-4_pn_io_st ek-ertec_200p sinamics_dcp simatic_et200s simatic_rf182c_firmware scalance_xp-200_firmware simatic_et200sp_im155-6_pn_basic_firmware simatic_et200mp_im155-5_pn_st simatic_cp_443-1_firmware scalance_xb-200 simatic_et200sp_im155-6_pn_st_firmware im_154-3_pn_hf_firmware scalance_xm-400_firmware simatic_cp_343-1_erpc_firmware simatic_et200pro scalance_xb-200_firmware simatic_pn\/pn_coupler simatic_et200sp_im155-6_pn_st simatic_et200mp_im155-5_pn_hf scalance_xc-200 simatic_rf180c_firmware simatic_cp_343-1_advanced scalance_m-800 simatic_et200m_im153-4_pn_io_hf SCALANCE XF208 SIMOTION D SCALANCE XR324-4M EEC (24V, ports on front)SCALANCE X204IRT SCALANCE X307-2 EEC (2x 24V, coated)SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)SIMOTION P SCALANCE XB-200 family SCALANCE X204-2TS SCALANCE X307-3 SCALANCE XR324-12M (24V, ports on rear)SCALANCE X308-2 SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL SCALANCE X307-2 EEC (230V, coated)SIMATIC RF180C SIMATIC MV440 HR SIPLUS NET SCALANCE X308-2 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN: IO-Link Master SCALANCE X202-2P IRT SCALANCE XR324-4M PoE (230V, ports on rear)SCALANCE X302-7 EEC (230V)SIMATIC CP 443-1 SOFTNET-IE PNIO SCALANCE S615 LAN-Router SCALANCE X206-1LD SIMATIC CP 343-1 Advanced SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants)SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL SCALANCE W-700 IEEE 802.11n family SIPLUS ET 200SP IM 155-6 PN ST TX RAIL SIMATIC MV420 SR-B SCALANCE XR-500 family SINAMICS DCP SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 SCALANCE XF204IRT SCALANCE X307-2 EEC (2x 230V)SIMATIC ET 200MP IM 155-5 PN ST SCALANCE M826-2 SHDSL-Router SCALANCE XF-200BA SCALANCE X204IRT PRO SIMATIC MV420 SR-P SCALANCE XP-200 SIMATIC RF182C SIPLUS NET CP 443-1 SIMOTION C SCALANCE X201-3P IRT SCALANCE M804PB SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P SIPLUS ET 200SP IM 155-6 PN ST BA SIMATIC ET 200pro IM 154-3 PN HF SCALANCE X206-1 SCALANCE XF204 SIMATIC MV420 SR-B Body Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 SIMATIC IPC Support, Package for VxWorks SCALANCE X308-2LH SCALANCE XF204-2 SCALANCE XR324-4M EEC (24V, ports on rear)SCALANCE XR324-4M PoE (24V, ports on front)SCALANCE XM-400 family SCALANCE X302-7 EEC (2x 230V)SCALANCE X408-2 SCALANCE XF201-3P IRT SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL SIMATIC MV420 SR-P Body SCALANCE M816-1 ADSL-Router SIMATIC MV440 SR SCALANCE M812-1 ADSL-Router SCALANCE X307-2 EEC (2x 24V)SCALANCE X212-2 SCALANCE X306-1LD FE SCALANCE X308-2M TS SCALANCE M876-3 SIMATIC ET 200AL IM 157-1 PN SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 SIPLUS ET 200MP IM 155-5 PN ST TX RAIL SCALANCE X201-3P IRT PRO SCALANCE X302-7 EEC (2x 230V, coated)SCALANCE X320-1-2LD FE SCALANCE XR324-4M PoE TS (24V, ports on front)SCALANCE XR324-12M TS (24V)SCALANCE XR324-12M (230V, ports on rear)SCALANCE XF204-2BA IRT SCALANCE X204-2FM SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 SIMATIC CP 443-1 OPC UA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN, 4AO U/I 4xM12 SCALANCE X204-2LD TS SIMATIC ET 200SP IM 155-6 PN HF SCALANCE X302-7 EEC (24V, coated)SIMATIC CP 443-1 Advanced SCALANCE XR-300WG family SCALANCE X224 SIMATIC ET 200SP IM 155-6 PN ST SIPLUS ET 200SP IM 155-6 PN HF PROFINET Driver for Controller SIMATIC RF600R family SCALANCE M876-4 (NAM)SCALANCE M874-3 SCALANCE X308-2LD SCALANCE X307-2 EEC (24V)SIMATIC ET 200SP IM 155-6 PN BA SCALANCE X208 SCALANCE M876-3 (ROK)SCALANCE X304-2FE SCALANCE X307-2 EEC (230V)SIPLUS NET CP 343-1 Lean SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)SIMATIC ET 200SP IM 155-6 PN ST BA SCALANCE X302-7 EEC (2x 24V)SIMATIC ET 200MP IM 155-5 PN HF RUGGEDCOM RM1224 family SIMATIC ET 200pro IM 154-4 PN HF SCALANCE X208PRO SIPLUS NET CP 343-1 SCALANCE X212-2LD SCALANCE X302-7 EEC (24V)SCALANCE X204-2 SCALANCE XF206-1 SIMATIC ET200S (incl. SIPLUS variants)SIMATIC CP 343-1 Lean SCALANCE XR324-4M EEC (2x 24V, ports on rear)SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)SCALANCE XR324-4M PoE (24V, ports on rear)SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 SCALANCE X204-2LD SCALANCE M876-4 (EU)SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants)SCALANCE X308-2M SCALANCE X308-2M PoE SCALANCE X310FE SCALANCE X308-2LH+SIPLUS NET CP 343-1 Advanced SIMATIC CP 343-1 SCALANCE X307-3LD Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 SIPLUS NET CP 443-1 Advanced SCALANCE XF202-2P IRT SCALANCE X307-2 EEC (24V, coated)SCALANCE X307-2 EEC (2x 230V, coated)SCALANCE X302-7 EEC (2x 24V, coated)SCALANCE X202-2P IRT PRO SCALANCE X310 SCALANCE XR324-12M (24V, ports on front)SIPLUS ET 200MP IM 155-5 PN ST SCALANCE X320-1 FE SCALANCE M874-2 SCALANCE XR324-4M PoE (230V, ports on front)SIMATIC CP 343-1 ERPC SIPLUS ET 200SP IM 155-6 PN ST SIMATIC MV440 UR SCALANCE X216 SIMATIC CP 1616 and CP 1604 SCALANCE X302-7 EEC (230V, coated)SIPLUS ET 200MP IM 155-5 PN HF SCALANCE X200-4P IRT SCALANCE XC-200 SCALANCE X202-2IRT SCALANCE XR324-12M (230V, ports on front)SCALANCE XR324-4M EEC (2x 24V, ports on front)

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-19279

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.27% / 50.07%

7 Day CHG~0.00%

Published-10 Mar, 2020 | 19:16

Updated-05 Aug, 2024 | 02:09

A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.

Vendor-Siemens AG

Product-siprotec_4 siprotec_compact SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules

CWE ID-CWE-20

Improper Input Validation

CVE-2018-16557

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-8.2||HIGH

EPSS-0.09% / 27.02%

7 Day CHG~0.00%

Published-13 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 10:24

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions < V7.0.3), SIMATIC S7-400 H V4.5 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.9), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V8.2.1), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Sending of specially crafted packets to port 102/tcp via Ethernet interface via PROFIBUS or Multi Point Interfaces (MPI) could cause a denial of service condition on affected devices. Flashing with a firmware image may be required to recover the CPU. Successful exploitation requires an attacker to have network access to port 102/tcp via Ethernet interface or to be able to send messages via PROFIBUS or Multi Point Interfaces (MPI) to the device. No user interaction is required. If no access protection is configured, no privileges are required to exploit the security vulnerability. The vulnerability could allow causing a denial of service condition of the core functionality of the CPU, compromising the availability of the system.

Vendor-Siemens AG

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

CVE-2014-9369

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.25% / 48.25%

7 Day CHG~0.00%

Published-07 Mar, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service (device restart) via crafted packets.

Vendor-n/a Siemens AG

Product-spc6000_firmware spc4000_firmware spc5000_firmware spc6000 spc5000 spc4000 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2020-15783

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.58%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 19:21

Updated-04 Aug, 2024 | 13:22

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2016-7987

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-7.5||HIGH

EPSS-0.84% / 73.83%

7 Day CHG~0.00%

Published-13 Feb, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 2404/TCP could cause the affected device to go into defect mode. A cold start might be required to recover the system, a Denial-of-Service Vulnerability.

Vendor-n/a Siemens AG

Product-eta4_firmware eta2_firmware sicam_ak sicam_bc sicam_bc_1703 sicam_ak_3 sicam_tm_1703 sicam_tm Siemens SICAM RTU Devices before 08

CVE-2014-1966

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs