The vulnerability of the web interface of microprogramming software for programmable logic controllers SIMATIC S7-1200 allows a attacker to perform a CSRF attack.

🗓️ 14 Feb 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The SIMATIC S7-1200 web interface has a CSRF vulnerability enabling remote attacks.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-47100	14 Jan 202510:32	–	circl
CNNVD	Siemens SIMATIC S7-1200 跨站请求伪造漏洞	14 Jan 202500:00	–	cnnvd
CNVD	Siemens SIMATIC S7-1200 CPU Cross-Site Request Forgery Vulnerability	14 Jan 202500:00	–	cnvd
CVE	CVE-2024-47100	14 Jan 202510:30	–	cve
Cvelist	CVE-2024-47100	14 Jan 202510:30	–	cvelist
EUVD	EUVD-2024-42311	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC S7-1200 CPUs	14 Jan 202500:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	14 Jan 202511:54	–	ncsc
NVD	CVE-2024-47100	14 Jan 202511:15	–	nvd
Positive Technologies	PT-2025-2757 · Siemens · Simatic S7-1200 Cpu +1	14 Jan 202500:00	–	ptsecurity

Vulners

Node

siemens_ag siemens_ag_simatic_s7-1200_cpu_1211c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1211c_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1212c_ac/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1212c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1212c_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1212fc_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1212fc_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1214c_ac/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1214c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1214c_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1214fc_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1214fc_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1215c_ac/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1215c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1215c_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1215fc_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1215fc_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1217c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_1212_ac/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1212_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1212c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1212c_dc/dc/dc_railRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1214_ac/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1214_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1214_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1214c_dc/dc/dc_railRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1214fc_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1214fc_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1215_ac/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1215_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1215_dc/dc/rlyRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1215c_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_siplus_s7-1200_cpu_1215fc_dc/dc/dcRange<4.7

OR

siemens_ag siemens_ag_simatic_s7-1200_cpu_1211c_ac/dc/rlyRange<4.7

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-717113.html
web	www.web.nvd.nist.gov/view/vuln/detail

14 Feb 2025 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 37.1

CVSS 28.5

EPSS0.00234

simatic s7 1200 web interface cross site forgery