CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

CVE-2024-49849

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4,...

CVE-2024-33698

A vulnerability has been identified in Opcenter Quality All versions V2406, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 2, SIMATIC PCS neo V5.0 All versions V5.0 Update 1, SINEC NMS All versions, SINEMA Remote Connect Client A...

CVE-2024-33499

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

CVE-2024-35292

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 6ES7288-1CR40-0AA0 All versions, SIMATIC S7-200 SMART CPU CR60 6ES7288-1CR60-0AA0 All versions, SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA0 All versions, SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA1 All versions, SIMATI...

CVE-2024-35783

A vulnerability has been identified in SIMATIC BATCH V9.1 All versions, SIMATIC Information Server 2020 All versions V2020 SP2 Update 5, SIMATIC Information Server 2022 All versions V2022 SP1 Update 2, SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC06, SIMATIC Process Historian 2020 All versions V202...

Siemens SIMATIC S7-1200 CPUs Cross-Site Request Forgery (CVE-2024-47100)

The web interface of the affected devices is vulnerable to Cross-Site Request Forgery CSRF attacks. This could allow an unauthenticated attacker to change the CPU mode by tricking a legitimate and authenticated user with sufficient permissions on the target CPU to click on a malicious link. This...

CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

CVE-2024-47100

The CVE-2024-47100 instance affects Siemens SIMATIC S7-1200 CPU line (including various 1211C–1217C, SIPLUS variants) where the web interface is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability allows an unauthenticated attacker to change the CPU mode by luring an authenticated ...

CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

Siemens SIMATIC S7-1200 CPU Cross-Site Request Forgery Vulnerability

SIMATIC S7-1200 CPU products are designed for discrete and continuous control in industrial environments such as global manufacturing, food and beverage, and the chemical industry.SIPLUS extreme products are designed to operate reliably under extreme conditions and are based on SIMATIC, LOGO!,...

PT-2025-2757 · Siemens · Simatic S7-1200 Cpu +1

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-1200 CPU versions 1211C through 1217C SIPLUS S7-1200 CPU versions 1212 through 1215 Description: The web interface of the affected devices is vulnerable to Cross-Site Request Forgery CSRF attacks. This could allow an unauthenticate...

Siemens SIMATIC S7-1200 跨站请求伪造漏洞

SIMATIC S7-1200 CPU products are designed for discrete and continuous control in industrial environments such as global manufacturing, food and beverage, and the chemical industry.SIPLUS extreme products are designed to operate reliably under extreme conditions and are based on SIMATIC, LOGO!,...

Siemens SIMATIC S7-1200 CPUs

SUMMARY The web interface of SIMATIC S7-1200 CPUs before V4.7 is affected by a cross-site request forgery CSRF vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure,...

CVE-2024-49775

A vulnerability has been identified in Opcenter Execution Foundation All versions V2501.0001, Opcenter Intelligence All versions V2501.0001, Opcenter Quality All versions V2512, Opcenter RDnL All versions V2410, SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 3,...

PT-2024-9692 · Siemens · Sinec Nms +6

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V5.0 Update 1 Opcenter Intelligence versions prior to V5.0 Update 1 Opcenter Quality versions prior to V5.0 Update 1 Opcenter RDL versions prior to V5.0 Update 1 SIMATIC PCS neo V4.0 versions...

Siemens SIMATIC PCS neo Buffer Overflow Vulnerability

SIMATIC PCS neo is a fully Web-based process control system. A buffer overflow vulnerability exists in Siemens SIMATIC PCS neo, which can be exploited by an unauthenticated, remote attacker to execute arbitrary code...

Siemens Engineering Platforms Deserialization Vulnerability

SIMATIC S7-PLCSIM simulates the S7-1200, S7-1500 and several other PLC derivatives and is shipped as part of SIMATIC STEP 7. SIMATIC STEP 7 TIA Portal is an engineering software package for configuring and programming SIMATIC controllers.SIMOCODE ES is the central software package for the...

CVE-2024-49849

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4,...