CVE-2014-2255
HighSummary
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTP packets.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of devices, potentially causing downtime in industrial automation systems.
Recommendation
It is recommended to update the firmware to version 1.5.0 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Siemens SIMATIC S7-1500 CPU PLC
See all- CVE-2014-2259High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTPS packets.
- CVE-2014-2257High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted ISO-TSAP packets.
- CVE-2014-2251High
The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, making it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions.
Original NVD description (English source)
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets.