CVE-2014-2258: Undefined Security Weakness

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTPS packets, a different vulnerability than CVE-2014-2259...

CVE-2014-2250: Undefined Security Weakness

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than...

CVE-2014-2254: Undefined Security Weakness

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted HTTP packets, a different vulnerability than CVE-2014-2255...

PT-2014-1954

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 Description The issue allows remote attackers to cause a denial of service, resulting in the device transitioning to defect mode, followed by a cold restart. This is achieved b...

CVE-2014-2252: Undefined Security Weakness

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted PROFINET packets, a different vulnerability than CVE-2014-2253...

PT-2014-1004

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 Description The issue allows remote attackers to cause a denial of service, resulting in the device transitioning to defect mode, which lasts until a hardware reset is performe...

PT-2014-1003

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 Description The issue concerns a problem with the random-number generator in the authentication handler of the web server, which lacks sufficient entropy. This makes it easier...

PT-2014-1178

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 Description The issue allows a remote attacker to cause a denial of service, resulting in the device entering defect mode, by sending crafted HTTP packets to the TCP port 80...

PT-2014-1002

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU PLC devices with firmware prior to 4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition, via crafted ISO-TSAP packets. Exploitation can be achieved by...

PT-2014-1955

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU PLC devices versions prior to 1.5.0 Siemens SIMATIC S7-1200 CPU PLC devices versions prior to 4.0 Description A cross-site request forgery CSRF issue affects the software, allowing remote attackers to hijack the...

CVE-2014-2249: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...