CVE-2014-2251
HighSummary
The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, making it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions.
Risk Assessment
The lack of sufficient entropy in the random-number generator may lead to session compromise and security breaches, posing a serious threat to the organization.
Recommendation
It is recommended to update the firmware to version 1.5.0 or later to enhance the security of the random-number generator.
Other vulnerabilities in Siemens SIMATIC S7-1500 CPU PLC
See all- CVE-2014-2259High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTPS packets.
- CVE-2014-2257High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted ISO-TSAP packets.
- CVE-2014-2255High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTP packets.
Original NVD description (English source)
The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors.