Simatic S7 1200 Cpu Firmware

simatic_s7_1200_cpu_firmware

Vendor: Siemens • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28831 1Siemens 78Simatic Cloud Connect 7 Cc712 Firmware Simatic Cloud Connect 7 Cc716 FirmwareSimatic Drive Controller Cpu 1504d Tf Firmware+75 more Jun 17, 2026 Sep 12, 2023 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow...Show more The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.Show less
CVE-2021-37172 1Siemens 2Simatic S7 1200 Cpu Firmware Simatic Step 7 (tia Portal) Jun 17, 2026 Aug 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could all...Show more A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.Show less
CVE-2019-10936 1Siemens 66Dk Standard Ethernet Controller Firmware Ek Ertec 200 FirmwareEk Ertec 200p Firmware+63 more Jun 17, 2026 Oct 10, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
CVE-2015-5698 1Siemens 2Simatic S7 1200 Cpu Simatic S7 1200 Cpu Firmware May 6, 2026 Aug 30, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown...Show more Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.Show less
CVE-2015-1048 1Siemens 1Simatic S7 1200 Cpu Firmware May 6, 2026 Jan 21, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via u...Show more Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.Show less