CVE-2014-2256
HighSummary
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before version 4.0 are vulnerable to remote attacks that can lead to denial of service via crafted ISO-TSAP packets.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of devices, potentially causing downtime in industrial automation systems.
Recommendation
It is recommended to update the device firmware to version 4.0 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Siemens SIMATIC S7-1200 CPU PLC
See all- CVE-2014-2258High
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before version 4.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTPS packets.
- CVE-2014-2254High
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before version 4.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTP packets.
- CVE-2014-2250High
The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, making it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions.
Original NVD description (English source)
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257.