Is CVE-2014-2251 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Siemens Simatic S7-1500 CPU Firmware

CVE-2014-2251

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors.

EPSS: 0.027 (84.7th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_s7-1500_cpu_firmware — versions 1.0.1, 1.1.0, 1.1.1
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (US Government Resource, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2014-2251?: CVE-2014-2251 is a vulnerability in Siemens Simatic S7-1500 CPU Firmware. Published 2014-03-16.
Is CVE-2014-2251 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.