CVE-2014-5074
highpriority · track · 41OT risk · elevatedEPSS 0.097 · 96 %ileexploit · PoCEUUSEPSS · scored 2026-10-22
Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationSIMATIC S7-1500 CPUcisa_csaf_ot
The firmware update for S7-1500 V1.6 can be obtained at the following location on the Siemens web site (http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=98164677&caller=view)
http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&objid=98164677&caller=view
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–7.1
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
- EDB-44693Siemens SIMATIC S7-1500 CPU - Remote Denial of ServicePoC · exploit_db
affected products (16)
Products and version ranges known to be affected.
- siemens simatic s7-1500 cpu firmware≤ 1.5.1nvdUScpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic s7-1500 cpu firmware= 1.0.1nvdUScpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic s7-1500 cpu firmware= 1.1.0nvdUScpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic s7-1500 cpu firmware= 1.1.1nvdUScpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic s7-1500 cpu firmware= 1.1.2nvdUScpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic s7-1500 cpu firmware= 1.5nvdUScpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic s7-1511-1 pn cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1511-1_pn_cpu:*:*:*:*:*:*:*:*
- siemens simatic s7-1513-1 pn cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1513-1_pn_cpu:*:*:*:*:*:*:*:*
- siemens simatic s7-1515-2 pn cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1515-2_pn_cpu:*:*:*:*:*:*:*:*
- siemens simatic s7-1516-3 pn/dp cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1516-3_pn\/dp_cpu:*:*:*:*:*:*:*:*
- siemens simatic s7-1516f-3 pn/dp cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1516f-3_pn\/dp_cpu:*:*:*:*:*:*:*:*
- siemens simatic s7-1518-4 pn/dp cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1518-4_pn\/dp_cpu:*:*:*:*:*:*:*:*
- siemens simatic s7-1518f-4 pn/dp cpuall versionsnvdUScpe:2.3:h:siemens:simatic_s7-1518f-4_pn\/dp_cpu:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-14-226-01Siemens SIMATIC S7-1500 CPU Denial of Service2014-05-17icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdfcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-14-226-01cnnvd
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-310688.pdfenisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-14-226-01enisa_euvd
- https://www.exploit-db.com/exploits/44693/enisa_euvd
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdfPatchVendor Advisorynvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-310688.pdfnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan