Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500269.NASLHistoryNov 08, 2019 - 12:00 a.m.
Siemens Simatic Cross-Site Request Forgery (CSRF)
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
0.003 Low
EPSS
Percentile
71.9%
Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
File data ot_500269.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| siemens | simatic_s7-1500_cpu_firmware | 1.0.1 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.0.1:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_firmware | 1.1.0 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.1.0:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_firmware | 1.1.1 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.1.1:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_firmware | * | cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:* |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2249
ics-cert.us-cert.gov/advisories/ICSA-14-073-01
ics-cert.us-cert.gov/advisories/ICSA-14-079-02
www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf
www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf
Related
nvd
nvd
CVE-2014-2249
2014-03-16 14:06:45
nessus
nessus
Siemens SIMATIC S7-1500 & S7-1200 Cross-Site Request Forgery (CVE-2014-2249)
2022-02-07 00:00:00
cvelist
cvelist
CVE-2014-2249
2014-03-16 10:00:00
cve
cve
CVE-2014-2249
2014-03-16 14:06:45
ptsecurity
ptsecurity
PT-2013-81: Cross-Site Request Forgery in Siemens SIMATIC S7-1500 CPU PLC
2013-05-08 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-03-16 14:06:00
ics
ics
Siemens SIMATIC S7-1200 Vulnerabilities
2018-08-23 12:00:00
Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities
2018-09-06 12:00:00
seebug
seebug
Siemens SIMATIC S7-1200ε€δΈͺζΌζ΄
2014-03-21 00:00:00