CVE-2014-2257
HighSummary
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted ISO-TSAP packets.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of PLC devices, potentially causing downtime in industrial processes.
Recommendation
It is recommended to update the firmware to version 1.5.0 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Siemens SIMATIC S7-1500 CPU PLC
See all- CVE-2014-2259High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTPS packets.
- CVE-2014-2255High
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before version 1.5.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTP packets.
- CVE-2014-2251High
The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, making it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions.
Original NVD description (English source)
Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets.