CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

CVE-2024-47100

The CVE-2024-47100 instance affects Siemens SIMATIC S7-1200 CPU line (including various 1211C–1217C, SIPLUS variants) where the web interface is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability allows an unauthenticated attacker to change the CPU mode by luring an authenticated ...

CVE-2024-47100

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0, SIMATIC S7-1200 CPU 1212C AC/DC/Rly 6ES7212-1BE40-0XB0, SIMATIC S7-1200 CPU 1212C DC/DC/DC...

Siemens SIMATIC S7-1200 CPU Cross-Site Request Forgery Vulnerability

SIMATIC S7-1200 CPU products are designed for discrete and continuous control in industrial environments such as global manufacturing, food and beverage, and the chemical industry.SIPLUS extreme products are designed to operate reliably under extreme conditions and are based on SIMATIC, LOGO!,...

PT-2025-2757 · Siemens · Simatic S7-1200 Cpu +1

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-1200 CPU versions 1211C through 1217C SIPLUS S7-1200 CPU versions 1212 through 1215 Description: The web interface of the affected devices is vulnerable to Cross-Site Request Forgery CSRF attacks. This could allow an unauthenticate...

Siemens SIMATIC S7-1200 跨站请求伪造漏洞

SIMATIC S7-1200 CPU products are designed for discrete and continuous control in industrial environments such as global manufacturing, food and beverage, and the chemical industry.SIPLUS extreme products are designed to operate reliably under extreme conditions and are based on SIMATIC, LOGO!,...

Siemens SIMATIC S7-1200 CPUs

SUMMARY The web interface of SIMATIC S7-1200 CPUs before V4.7 is affected by a cross-site request forgery CSRF vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure,...

Siemens Engineering Platforms Deserialization Vulnerability

SIMATIC S7-PLCSIM simulates the S7-1200, S7-1500 and several other PLC derivatives and is shipped as part of SIMATIC STEP 7. SIMATIC STEP 7 TIA Portal is an engineering software package for configuring and programming SIMATIC controllers.SIMOCODE ES is the central software package for the...

CVE-2024-52051

The CVE-2024-52051 entry describes a local arbitrary code execution vulnerability in Siemens engineering and automation software. Affected products include SIMATIC S7-PLCSIM, STEP 7 Safety, STEP 7, WinCC Unified PC Runtime/Unified/WinCC, SIMOCODE ES, SIMOTION SCOUT TIA, SINAMICS Startdrive, SIRIU...

CVE-2024-49849

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4,...

The vulnerability of the microprogrammed software in the SIMATIC S7-200 SMART CPU family, related to uncontrolled resource consumption, allows a intruder to trigger malfunctions during maintenance operations.

The vulnerability of the microprogrammed software in the SIMATIC S7-200 SMART CPU family is related to incorrect processing of TCP packets. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system remotely...

Siemens SIMATIC S7-1500 CPUs Authentication Bypass Using an Alternate Path or Channel (CVE-2024-46887)

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum...

Siemens SIMATIC S7-1500 and S7-1200 CPUs URL Redirection to Untrusted Site (CVE-2024-46886)

The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted...

CVE-2024-47493 Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of the Juniper Networks Junos OS on the MX Series platforms with Trio-based FPCs allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. In case of channelized Modular...

CVE-2024-39544 Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files

An Incorrect Default Permissions vulnerability in the command line interface CLI of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF traceoptions files, representing an exposure of sensitive information. On all Junos OS Evolved platforms, when NETCONF...

Siemens SIMATIC S7-1200和Siemens SIMATIC S7-1500 安全漏洞

SIMATIC Drive Controllers are designed for the automation of production machines, combining the functionality of SIMATIC S7-1500 CPUs and SINAMICS S120 drive controls. simatic ET 200SP Open Controller is the pc-based version of the SIMATIC S7-1500 controller, including optional visualization and...

Siemens SIMATIC S7-1500 and S7-1200 CPUs

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC S7-200 SMART Devices Uncontrolled Resource Consumption (CVE-2024-43647)

Affected devices do not properly handle TCP packets with an incorrect structure. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the network cable of the device needs to be unplugged and re-plugged. This plugin only works...

Siemens Industrial Product Null Pointer Dereference Vulnerability

SIMATIC CP 1242 and CP 1243 associated processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other data encryption protocols.SIMATIC HMI Panels are used for operator...