CVE-2017-2684
CVE-2017-2684 is a critical-severity vulnerability in Siemens Simatic Logon with a CVSS 3.x base score of 9.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-592.
Key facts
- Severity: Critical (CVSS 3.x base score 9.0)
- CVSS v2: 6.8
- EPSS exploit prediction: 2% (78th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-592
- Affected product: Siemens Simatic Logon
- Published:
- Last modified:
Description
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
Frequently asked questions
- What is CVE-2017-2684?
- Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
- How severe is CVE-2017-2684?
- CVE-2017-2684 has a CVSS 3.x base score of 9.0, rated critical severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2017-2684 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (78th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2017-2684?
- CVE-2017-2684 affects Siemens Simatic Logon. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2017-2684?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2017-2684 published?
- CVE-2017-2684 was published on 2017-02-22 and last updated on 2026-06-17.
References
- http://www.securityfocus.com/bid/96208
- https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-931064.pdf
Affected products (1)
- cpe:2.3:a:siemens:simatic_logon:*:sp3_update_1:*:*:*:*:*:*
More vulnerabilities in Siemens Simatic Logon
- CVE-2017-9938 — High (CVSS 7.5): A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted…
- CVE-2021-3449 — Medium (CVSS 5.9): An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a…
All CVEs affecting Siemens Simatic Logon →
Other CWE-592 vulnerabilities
- CVE-2026-43512 — Critical (CVSS 9.8): DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects…
- CVE-2019-3899 — Critical (CVSS 9.8): It was found that default configuration of Heketi does not require any authentication potentially exposing the…
- CVE-2018-14643 — Critical (CVSS 9.8): An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can…
- CVE-2017-2650 — High (CVSS 8.5): It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox…
- CVE-2014-2367 — High (CVSS 7.5): The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2…
- CVE-2012-4688 — High (CVSS 7.5): The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors…