Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.1
CVSSv2

CVE-2014-5074

Published: 17/08/2014 Updated: 25/05/2018
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
VMScore: 715
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Subscribe to Simatic S7-1500 Cpu Firmware

Vulnerability Summary

Siemens SIMATIC S7-1500 CPU devices with firmware prior to 1.6 allow remote malicious users to cause a denial of service (device restart and STOP transition) via crafted TCP packets.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

siemens simatic_s7-1500_cpu_firmware 1.5

siemens simatic_s7-1500_cpu_firmware

siemens simatic_s7-1500_cpu_firmware 1.0.1

siemens simatic_s7-1500_cpu_firmware 1.1.0

siemens simatic_s7-1500_cpu_firmware 1.1.1

siemens simatic_s7-1500_cpu_firmware 1.1.2

siemens simatic_s7-1518f-4_pn\\/dp_cpu -

siemens simatic_s7-1513-1_pn_cpu -

siemens simatic_s7-1515-2_pn_cpu -

siemens simatic_s7-1511-1_pn_cpu -

siemens simatic_s7-1516-3_pn\\/dp_cpu -

siemens simatic_s7-1518-4_pn\\/dp_cpu -

siemens simatic_s7-1516f-3_pn\\/dp_cpu -

Exploits

Exploit DB: Siemens SIMATIC S7-1500 CPU - Remote Denial of Service
# Exploit Title: Siemens SIMATIC S7-1500 CPU - Remote Denial of Service # Google Dork: inurl:/Portal/Portalmwsl # Date: 2018-05-22 # Exploit Author: t4rkd3vilz, Jameel Nabbo # Vendor Homepage: wwwsiemenscom/ # Version: SIMATIC S7-1500 CPU all versions before V16 # Tested on: Kali Linux # CVE: CVE-2014-5074 #!/usr/bin/python import so ...

References

NVD-CWE-noinfohttp://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdfhttps://ics-cert.us-cert.gov/advisories/ICSA-14-226-01https://www.exploit-db.com/exploits/44693/https://cert-portal.siemens.com/productcert/pdf/ssa-310688.pdfhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/44693/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook