Siemens SIMATIC S7-1200 Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-2258US | high7.8 | — | ||
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets, a different… | ||||
| CVE-2014-2254US | high7.8 | — | ||
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets, a different… | ||||
| CVE-2014-2256US | high7.8 | — | ||
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets, a differ… | ||||
| CVE-2014-2252US | medium6.1 | — | ||
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted PROFINET packets, a differ… | ||||
| CVE-2014-2250US | high8.3 | — | ||
The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defe… | ||||
| CVE-2014-2249US | medium5.8 | — | ||
Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 a… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-079-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-079-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (6)
- MitigationSIMATIC S7-1200 CPU family
Siemens addresses all these issues in a security advisory that can be found at the following location: (http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - MitigationSIMATIC S7-1200 CPU family
Siemens addresses all these issues in a security advisory that can be found at the following location: (http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - MitigationSIMATIC S7-1200 CPU family
Siemens addresses all these issues in a security advisory that can be found at the following location: (http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - MitigationSIMATIC S7-1200 CPU family
Siemens addresses all these issues in a security advisory that can be found at the following location: (http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - MitigationSIMATIC S7-1200 CPU family
Siemens addresses all these issues in a security advisory that can be found at the following location: (http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf - MitigationSIMATIC S7-1200 CPU family
Siemens addresses all these issues in a security advisory that can be found at the following location: (http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf)
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan