CVE-2017-9938

High

Published: 08/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability was discovered in Siemens SIMATIC Logon (all versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically.

Risk Assessment

This vulnerability could lead to service unavailability, impacting the organization's operations. Although the service restarts automatically, it may cause disruptions in system functionality.

Recommendation

It is recommended to upgrade to version V1.6 or later to mitigate this vulnerability. Additionally, monitoring traffic on port 16389/tcp is advisable to detect potential attacks.

Other vulnerabilities in Siemens SIMATIC Logon

CVE-2017-2684Critical
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.

Original NVD description (English source)

A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted packets sent to the SIMATIC Logon Remote Access service on port 16389/tcp to cause a Denial-of-Service condition. The service restarts automatically.