Siemens Simatic S7 1200 Cpu 1214 Fc vulnerabilities
9 vulnerabilities
Known vulnerabilities in Siemens Simatic S7 1200 Cpu 1214 Fc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-2780siemenssimatic_s7-1200_firmware+8
EPSS score2.39%
Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).CVE-2013-0700siemenssimatic_s7-1200_firmware+8EPSS score2.39%
Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).CVE-2021-40365siemenssimatic drive controller cpu 1504d tf+156EPSS score0.93%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44693siemenssimatic drive controller cpu 1504d tf+156EPSS score0.77%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44694siemenssimatic drive controller cpu 1504d tf+152EPSS score0.66%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44695siemenssimatic drive controller cpu 1504d tf+156EPSS score0.77%
Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2022-30694siemens6ag1151-8ab01-7ab0_firmware+197EPSS score0.32%
The login endpoint /FormLogin in affected web services does not apply proper origin checking.
This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.CVE-2012-3037siemenssimatic_s7-1200_firmware+8EPSS score1.47%
The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.CVE-2012-3040siemenssimatic_s7-1200_firmware+8EPSS score2.56%
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.