Siemens SIMATIC S7-1200 CPU V1/V2 Devices
SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causing a communications error. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2011-20002US | —OT erhöht | — | ||
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All ver… | ||||
| CVE-2011-20001US | — | — | ||
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All ver… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices - CSAF Versionself
- SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices - HTML Versionself
- ICS Advisory ICSA-25-294-03 JSONself
- ICS Advisory ICSA-25-294-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)
Disable the web server if possible
- MitigationSIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)
Disable the web server if possible
- BehobenSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)
Update to V2.0.2 or later version
- BehobenSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)
Update to V2.0.3 or later version
- BehobenSIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)
Update to V2.0.2 or later version
- BehobenSIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)
Update to V2.0.3 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan