Lucene search
HistorySep 25, 2012 - 11:07 a.m.
CVE-2012-3037
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.0%
The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.
Affected configurations
Node
siemenssimatic_s7-1200_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200Match-
Node
siemenssimatic_s7-1200_cpu_1211c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1211cMatch-
Node
siemenssimatic_s7-1200_cpu_1212c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1212cMatch-
Node
siemenssimatic_s7-1200_cpu_1212fc_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1212fcMatch-
Node
siemenssimatic_s7-1200_cpu_1214_fc_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1214_fcMatch-
Node
siemenssimatic_s7-1200_cpu_1214c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1214cMatch-
Node
siemenssimatic_s7-1200_cpu_1215_fc_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1215_fcMatch-
Node
siemenssimatic_s7-1200_cpu_1215c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1215cMatch-
Node
siemenssimatic_s7-1200_cpu_1217c_firmwareRange2.0.0–3.0.0
siemenssimatic_s7-1200_cpu_1217cMatch-
Related
prion
prion
Code injection
2012-09-25 11:07:00
openvas
openvas
nessus
nessus
Siemens Simatic Exposure of Sensitive Information to an Unauthorized Actor
2019-11-08 00:00:00
Siemens SIMATIC Improper Certificate Validation (CVE-2012-3037)
2022-02-07 00:00:00
cvelist
cvelist
CVE-2012-3037
2022-10-03 16:15:22
cve
cve
CVE-2012-3037
2022-10-03 16:15:22
ptsecurity
ptsecurity
ics
ics
Siemens S7-1200 Insecure Storage of HTTPS CA Certificate
2013-05-06 12:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.0%
Related for NVD:CVE-2012-3037