ICSA-25-294-03

icsaUScisa_csaf_ot

Siemens SIMATIC S7-1200 CPU V1/V2 Devices

view advisory published 2011-06-10

SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causing a communications error. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2011-20002US—OT elevated—
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All ver…
CVE-2011-20001US——
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All ver…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)

    Disable the web server if possible

  • MitigationSIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)

    Disable the web server if possible

  • FixedSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)

    Update to V2.0.2 or later version

  • FixedSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)

    Update to V2.0.3 or later version

  • FixedSIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)

    Update to V2.0.2 or later version

  • FixedSIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)

    Update to V2.0.3 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan