Code injection

2012-09-2511:07:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

JSON

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

CPENameOperatorVersion
simatic_s7-1200_cpu_1211c_firmwarege2.0.0
simatic_s7-1200_cpu_1211c_firmwarelt3.0.0
simatic_s7-1200_cpu_1212c_firmwarege2.0.0
simatic_s7-1200_cpu_1212c_firmwarelt3.0.0
simatic_s7-1200_cpu_1212fc_firmwarege2.0.0
simatic_s7-1200_cpu_1212fc_firmwarelt3.0.0
simatic_s7-1200_cpu_1214_fc_firmwarege2.0.0
simatic_s7-1200_cpu_1214_fc_firmwarelt3.0.0
simatic_s7-1200_cpu_1214c_firmwarege2.0.0
simatic_s7-1200_cpu_1214c_firmwarelt3.0.0

Name	Operator	Version
simatic_s7-1200_cpu_1211c_firmware	ge	2.0.0
simatic_s7-1200_cpu_1211c_firmware	lt	3.0.0
simatic_s7-1200_cpu_1212c_firmware	ge	2.0.0
simatic_s7-1200_cpu_1212c_firmware	lt	3.0.0
simatic_s7-1200_cpu_1212fc_firmware	ge	2.0.0
simatic_s7-1200_cpu_1212fc_firmware	lt	3.0.0
simatic_s7-1200_cpu_1214_fc_firmware	ge	2.0.0
simatic_s7-1200_cpu_1214_fc_firmware	lt	3.0.0
simatic_s7-1200_cpu_1214c_firmware	ge	2.0.0
simatic_s7-1200_cpu_1214c_firmware	lt	3.0.0