Vulnerability in Siemens Simatic S7 CPU 1200 Firmware

CVE-2014-2254

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets, a different vulnerability than CVE-2014-2255.

EPSS: 0.046 (90.8th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_s7_cpu_1200_firmware — versions 3.0
Siemens Simatic_s7_cpu-1211c
Siemens Simatic_s7_cpu_1212c
Siemens Simatic_s7_cpu_1214c
Siemens Simatic_s7_cpu_1215c
Siemens Simatic_s7_cpu_1217c
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (US Government Resource, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM)