Vulnerability in Siemens Simatic S7-1500 CPU Firmware
CVE-2014-5074
Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.
EPSS: 0.097 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Siemens Simatic_s7-1500_cpu_firmware — versions 1.0.1, 1.1.0, 1.1.1
- Siemens Simatic_s7-1511-1_pn_cpu
- Siemens Simatic_s7-1513-1_pn_cpu
- Siemens Simatic_s7-1515-2_pn_cpu
- Siemens Simatic_s7-1516-3_pn\/dp_cpu
- Siemens Simatic_s7-1516f-3_pn\/dp_cpu
- Siemens Simatic_s7-1518-4_pn\/dp_cpu
- Siemens Simatic_s7-1518f-4_pn\/dp_cpu
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (US Government Resource, Patch, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2014-5074?
- CVE-2014-5074 is a vulnerability in Siemens Simatic S7-1500 CPU Firmware. Published 2014-08-17.
- Is CVE-2014-5074 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.