Known Vulnerabilities for Simatic S7-1200 Firmware by Siemens
Listed below are 10 of the newest known vulnerabilities associated with "Simatic S7-1200 Firmware" by "Siemens".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-28400 | Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. Th... | 7.5 - HIGH | 2021-07-13 | 2022-04-12 |
| CVE-2019-13945 | A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU... | 6.8 - MEDIUM | 2019-12-12 | 2020-10-09 |
| CVE-2018-13815 | A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker cou... | 7.5 - HIGH | 2018-12-13 | 2019-10-09 |
| CVE-2017-12741 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Developm... | 7.5 - HIGH | 2017-12-26 | 2022-02-09 |
| CVE-2017-2681 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial... | 6.5 - MEDIUM | 2017-05-11 | 2022-04-12 |
| CVE-2017-2680 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Et... | 6.5 - MEDIUM | 2017-05-11 | 2022-04-12 |
| CVE-2013-2780 | Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and cont... | 7.8 - HIGH | 2013-04-22 | 2022-02-01 |
| CVE-2013-0700 | Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and cont... | 7.8 - HIGH | 2013-04-22 | 2022-02-01 |
| CVE-2012-3040 | Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote at... | 4.3 - MEDIUM | 2012-10-10 | 2022-02-01 |
| CVE-2012-3037 | The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authori... | 4.3 - MEDIUM | 2012-09-25 | 2022-02-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Siemens | Simatic S7-1200 Firmware | 4.2.1 | All | All | All |