CVE-2014-2251

Published: Mar 16, 2014Modified: May 6, 2026

8.3

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:C

Exploitability: 8.6 / Impact: 8.5

Source: NVD

Description

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors.

Affected (4)

Products: Siemens: Simatic S7 1500 Cpu Firmware

Siemens

1 product

Simatic S7 1500 Cpu Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu Firmware	Up to 1.1.2
Siemens Simatic S7 1500 Cpu Firmware	Version 1.0.1
Siemens Simatic S7 1500 Cpu Firmware	Version 1.1.0
Siemens Simatic S7 1500 Cpu Firmware	Version 1.1.1