Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Simatic_s7\-1500_cpu_firmware
(Siemens)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 14 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2014-03-16 | CVE-2014-2247 | The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. | Simatic_s7\-1500_cpu_firmware | N/A | ||
| 2014-03-16 | CVE-2014-2246 | Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Simatic_s7\-1500_cpu_firmware | N/A | ||
| 2014-08-17 | CVE-2014-5074 | Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets. | Simatic_s7\-1500_cpu_firmware, Simatic_s7\-1511\-1_pn_cpu, Simatic_s7\-1513\-1_pn_cpu, Simatic_s7\-1515\-2_pn_cpu, Simatic_s7\-1516\-3_pn\/dp_cpu, Simatic_s7\-1516f\-3_pn\/dp_cpu, Simatic_s7\-1518\-4_pn\/dp_cpu, Simatic_s7\-1518f\-4_pn\/dp_cpu | N/A | ||
| 2014-03-16 | CVE-2014-2249 | Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | Simatic_s7\-1500_cpu_firmware | N/A |