CVE-2012-3037

Published: Sep 25, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

Affected (9)

Products: Siemens: Simatic S7 1200 Firmware, Simatic S7 1200 Cpu 1211c Firmware, Simatic S7 1200 Cpu 1212c Firmware, Simatic S7 1200 Cpu 1212fc Firmware, Simatic S7 1200 Cpu 1214 Fc Firmware, Simatic S7 1200 Cpu 1214c Firmware, Simatic S7 1200 Cpu 1215 Fc Firmware, Simatic S7 1200 Cpu 1215c Firmware, Simatic S7 1200 Cpu 1217c Firmware

Siemens

9 products

Simatic S7 1200 Firmware

Simatic S7 1200 Cpu 1211c Firmware

Simatic S7 1200 Cpu 1212c Firmware

Simatic S7 1200 Cpu 1212fc Firmware

Simatic S7 1200 Cpu 1214 Fc Firmware

Simatic S7 1200 Cpu 1214c Firmware

Simatic S7 1200 Cpu 1215 Fc Firmware

Simatic S7 1200 Cpu 1215c Firmware

Simatic S7 1200 Cpu 1217c Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1211c Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1211c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1212c Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1212c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1212fc Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1212fc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1214 Fc Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1214 Fc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1214c Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1214c	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1215 Fc Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1215 Fc	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1215c Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1215c	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1200 Cpu 1217c Firmware	From 2.0.0 to 3.0.0

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu 1217c	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (6)

http://en.securitylab.ru/lab/PT-2012-48

Source: ics-cert@hq.dhs.gov

Third Party Advisory

http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-240718.pdf

Source: ics-cert@hq.dhs.gov

Broken LinkVendor Advisory

http://www.us-cert.gov/control_systems/pdf/ICSA-12-263-01.pdf

Source: ics-cert@hq.dhs.gov

Broken LinkThird Party AdvisoryUS Government Resource

http://en.securitylab.ru/lab/PT-2012-48

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-240718.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

http://www.us-cert.gov/control_systems/pdf/ICSA-12-263-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryUS Government Resource

Timeline

No history available yet.