CVE-2014-2258
HighSummary
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before version 4.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTPS packets.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of devices, potentially causing downtime in industrial automation systems.
Recommendation
It is recommended to update the firmware to version 4.0 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Siemens SIMATIC S7-1200 CPU PLC
See all- CVE-2014-2256High
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before version 4.0 are vulnerable to remote attacks that can lead to denial of service via crafted ISO-TSAP packets.
- CVE-2014-2254High
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before version 4.0 are vulnerable to remote attacks that can lead to denial of service via crafted HTTP packets.
- CVE-2014-2250High
The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, making it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions.
Original NVD description (English source)
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets, a different vulnerability than CVE-2014-2259.