Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-3037
siemens
simatic s7-1200
plc
private key
remote attackers
spoofing
web server
forged certificate
security vulnerability
6.6 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
55.7%
The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.
Affected configurations
Node
siemenssimatic_s7-1200_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200Match-
Node
siemenssimatic_s7-1200_cpu_1211c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1211cMatch-
Node
siemenssimatic_s7-1200_cpu_1212c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1212cMatch-
Node
siemenssimatic_s7-1200_cpu_1212fc_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1212fcMatch-
Node
siemenssimatic_s7-1200_cpu_1214_fc_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1214_fcMatch-
Node
siemenssimatic_s7-1200_cpu_1214c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1214cMatch-
Node
siemenssimatic_s7-1200_cpu_1215_fc_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1215_fcMatch-
Node
siemenssimatic_s7-1200_cpu_1215c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1215cMatch-
Node
siemenssimatic_s7-1200_cpu_1217c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1217cMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| siemens:simatic_s7-1200_firmware | siemens simatic s7-1200 firmware | lt | 3.0.0 |
Related
nessus
nessus
Siemens Simatic Exposure of Sensitive Information to an Unauthorized Actor
2019-11-08 00:00:00
Siemens SIMATIC Improper Certificate Validation (CVE-2012-3037)
2022-02-07 00:00:00
openvas
openvas
cvelist
cvelist
CVE-2012-3037
2022-10-03 16:15:22
prion
prion
Code injection
2012-09-25 11:07:00
ptsecurity
ptsecurity
nvd
nvd
CVE-2012-3037
2012-09-25 11:07:46
ics
ics
Siemens S7-1200 Insecure Storage of HTTPS CA Certificate
2013-05-06 12:00:00
6.6 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
55.7%
Related for CVE-2012-3037