Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

siemens simatic s7-1200 cpu 1214 fc firmware vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2

CVE-2013-2780

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote malicious users to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).
Siemens Simatic S7-1200 FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c Firmware
7.8
CVSSv2

CVE-2013-0700

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote malicious users to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).
Siemens Simatic S7-1200 FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c Firmware
4.3
CVSSv2

CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
4.3
CVSSv2

CVE-2012-3040

Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x up to and including 3.0.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted URI.
Siemens Simatic S7-1200 FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c Firmware
4.3
CVSSv2

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote malicious users to spoof the S7-1200 web server by using this key to create a forged certificate.
Siemens Simatic S7-1200 FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1217c Firmware
NA

CVE-2021-40365

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an malicious user to cause a denial of service in the device.
Siemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1200 Cpu 12 1211c FirmwareSiemens Simatic S7-1200 Cpu 12 1212c FirmwareSiemens Simatic S7-1200 Cpu 12 1212fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214c FirmwareSiemens Simatic S7-1200 Cpu 12 1214fc FirmwareSiemens Simatic S7-1200 Cpu 12 1215c FirmwareSiemens Simatic S7-1200 Cpu 12 1215fc FirmwareSiemens Simatic S7-1200 Cpu 12 1217c FirmwareSiemens Siplus S7-1200 Cp 1243-1 Rail FirmwareSiemens Siplus S7-1200 Cp 1243-1 FirmwareSiemens Simatic S7-1500 Cpu 1507s Firmware
NA

CVE-2021-44693

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an malicious user to cause a denial of service in the device.
Siemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1200 Cpu 12 1211c FirmwareSiemens Simatic S7-1200 Cpu 12 1212c FirmwareSiemens Simatic S7-1200 Cpu 12 1212fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214c FirmwareSiemens Simatic S7-1200 Cpu 12 1214fc FirmwareSiemens Simatic S7-1200 Cpu 12 1215c FirmwareSiemens Simatic S7-1200 Cpu 12 1215fc FirmwareSiemens Simatic S7-1200 Cpu 12 1217c FirmwareSiemens Siplus S7-1200 Cp 1243-1 Rail FirmwareSiemens Siplus S7-1200 Cp 1243-1 FirmwareSiemens Simatic S7-1500 Cpu 1507s Firmware
NA

CVE-2021-44694

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an malicious user to cause a denial of service in the device.
Siemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1200 Cpu 12 1211c FirmwareSiemens Simatic S7-1200 Cpu 12 1212c FirmwareSiemens Simatic S7-1200 Cpu 12 1212fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214c FirmwareSiemens Simatic S7-1200 Cpu 12 1214fc FirmwareSiemens Simatic S7-1200 Cpu 12 1215c FirmwareSiemens Simatic S7-1200 Cpu 12 1215fc FirmwareSiemens Simatic S7-1200 Cpu 12 1217c FirmwareSiemens Siplus S7-1200 Cp 1243-1 Rail FirmwareSiemens Siplus S7-1200 Cp 1243-1 FirmwareSiemens Simatic S7-1500 Cpu 1507s Firmware
NA

CVE-2021-44695

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an malicious user to cause a denial of service in the device.
Siemens Simatic S7-plcsim Advanced FirmwareSiemens Simatic S7-1200 Cpu 1211c FirmwareSiemens Simatic S7-1200 Cpu 1212c FirmwareSiemens Simatic S7-1200 Cpu 1212fc FirmwareSiemens Simatic S7-1200 Cpu 1214 Fc FirmwareSiemens Simatic S7-1200 Cpu 1214c FirmwareSiemens Simatic S7-1200 Cpu 1214fc FirmwareSiemens Simatic S7-1200 Cpu 1215 Fc FirmwareSiemens Simatic S7-1200 Cpu 1215c FirmwareSiemens Simatic S7-1200 Cpu 1215fc FirmwareSiemens Simatic S7-1200 Cpu 1217c FirmwareSiemens Simatic S7-1200 Cpu 12 1211c FirmwareSiemens Simatic S7-1200 Cpu 12 1212c FirmwareSiemens Simatic S7-1200 Cpu 12 1212fc FirmwareSiemens Simatic S7-1200 Cpu 12 1214c FirmwareSiemens Simatic S7-1200 Cpu 12 1214fc FirmwareSiemens Simatic S7-1200 Cpu 12 1215c FirmwareSiemens Simatic S7-1200 Cpu 12 1215fc FirmwareSiemens Simatic S7-1200 Cpu 12 1217c FirmwareSiemens Siplus S7-1200 Cp 1243-1 Rail FirmwareSiemens Siplus S7-1200 Cp 1243-1 FirmwareSiemens Simatic S7-1500 Cpu 1507s Firmware
NA

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote malicious users to track the activities of other users via a login cross-site request forgery attack.
Siemens Simatic Wincc Runtime -Siemens Simatic S7-1500 Software Controller -Siemens Simatic S7-plcsim Advanced -Siemens 6es7154-8fb01-0ab0 FirmwareSiemens 6es7154-8ab01-0ab0 FirmwareSiemens 6es7154-8fx00-0ab0 FirmwareSiemens 6es7151-8ab01-0ab0 FirmwareSiemens 6es7151-8fb01-0ab0 FirmwareSiemens 6es7314-6eh04-0ab0 FirmwareSiemens 6es7315-2eh14-0ab0 FirmwareSiemens 6es7315-2fj14-0ab0 FirmwareSiemens 6es7315-7tj10-0ab0 FirmwareSiemens 6es7317-2ek14-0ab0 FirmwareSiemens 6es7317-2fk14-0ab0 FirmwareSiemens 6es7317-7tk10-0ab0 FirmwareSiemens 6es7317-7ul10-0ab0 FirmwareSiemens 6es7318-3el01-0ab0 FirmwareSiemens 6es7318-3fl01-0ab0 FirmwareSiemens 6ag1151-8ab01-7ab0 FirmwareSiemens 6ag1151-8fb01-2ab0 FirmwareSiemens 6ag1314-6eh04-7ab0 FirmwareSiemens 6ag1315-2eh14-7ab0 Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook