Vulnerability Details : CVE-2017-9938
A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically.
Vulnerability category: Memory CorruptionInput validationDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2017-9938
Probability of exploitation activity in the next 30 days: 0.32%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 67 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2017-9938
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
|
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2017-9938
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: productcert@siemens.com (Secondary)
References for CVE-2017-9938
-
https://www.tenable.com/security/research/tra-2017-34
[R1] Siemens SIMATIC Logon Denial of Service - Research Advisory | Tenable®
-
http://www.securityfocus.com/bid/99539
Siemens SIMATIC Logon CVE-2017-9938 Out of Bounds Write Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-804859.pdf
Vendor Advisory
Products affected by CVE-2017-9938
- cpe:2.3:a:siemens:simatic_logon:*:sp3_update_2:*:*:*:*:*:*