CVE-2017-14023 Denial of service in Siemens SIMATIC PCS 7
An authenticated administrator can crash services in Siemens SIMATIC PCS 7 by sending specially crafted messages to the DCOM interface.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-14023?
CVE-2017-14023 is a medium-severity denial of service vulnerability in Siemens SIMATIC PCS 7, published on 6 Nov 2017. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.
Weakness: CWE-20
Which versions are affected by CVE-2017-14023?
It affects 2 products.
Products include Siemens Simatic Pcs7, Siemens Simatic Wincc.
How do I fix CVE-2017-14023?
No fix has been published for CVE-2017-14023 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2017-14023 being exploited?
There is no known exploitation of CVE-2017-14023 in the wild and no public exploit code.
Other vulnerabilities in Siemens SIMATIC PCS 7
Sources
Also known as GHSA-wjw3-c5fg-gcm9.