Critical ICSA-17-320-02 3 CVEs

Siemens SICAM

Published Nov 16, 2017 · Updated Nov 16, 2017

Vendor: Siemens Product: SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00 ERAC00 ETA2 ETLS00 MODi00 DNPi00

Summary

ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.

Vulnerabilities 3

Unscored —

CVE-2017-12737

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS…

Nov 15, 2017
Unscored —

CVE-2017-12738

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS…

Nov 15, 2017
Unscored —

CVE-2017-12739

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS…

Nov 15, 2017

Revision history

2017-11-16 #1
ICSA-17-320-02 Siemens SICAM

References

ICS Advisory ICSA-17-320-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-320-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01