CVE-2017-9945 In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced b

Medium 6.5 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2017-9945?

CVE-2017-9945 is a medium-severity vulnerability in Siemens 7KM PAC Switched Ethernet PROFINET expansion module: All versions < V2.1.3, published on 30 Aug 2017.

Official description

In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast. The affected component requires a manual restart via the main device to recover.

Weakness: CWE-20

Which versions are affected by CVE-2017-9945?

It affects 1 product.

Products include Siemens 7km Pac Switched Ethernet Profinet Expansion Module Firmware.

How do I fix CVE-2017-9945?

No fix has been published for CVE-2017-9945 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-9945 being exploited?

There is no known exploitation of CVE-2017-9945 in the wild and no public exploit code.

Sources

Also known as GHSA-p785-pc36-p534.

Is CVE-2017-9945 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free