Vulnerability in Siemens Simatic_s7-1200
CVE-2012-3037
The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged…
Vulnerability class: Improper Certificate Validation
EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.
Affected products
- Siemens Simatic_s7-1200
- Siemens Simatic_s7-1200_cpu_1211c
- Siemens Simatic_s7-1200_cpu_1211c_firmware
- Siemens Simatic_s7-1200_cpu_1212c
- Siemens Simatic_s7-1200_cpu_1212c_firmware
- Siemens Simatic_s7-1200_cpu_1212fc
- Siemens Simatic_s7-1200_cpu_1212fc_firmware
- Siemens Simatic_s7-1200_cpu_1214c
- Siemens Simatic_s7-1200_cpu_1214c_firmware
- Siemens Simatic_s7-1200_cpu_1214_fc
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (Broken Link, Vendor Advisory)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, Broken Link)
- ics-cert@hq.dhs.gov (Third Party Advisory)