Skip to content
OpenAdvisories
High ICSA-14-073-01 9 CVEs

Siemens SIMATIC S7-1500 CPU Firmware Vulnerabilities

Published Dec 15, 2014 · Updated Jun 9, 2025 · Revision 2

Vendor: Siemens Product: SIMATIC S7-1500 CPU family

Vulnerabilities 9

  • Unscored —
    CVE-2014-2246

    Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with f…

  • Unscored —
    CVE-2014-2247

    The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers…

  • Unscored —
    CVE-2014-2248

    Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware befor…

  • Unscored —
    CVE-2014-2249

    Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 a…

  • Unscored —
    CVE-2014-2251

    The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have suffici…

  • Unscored —
    CVE-2014-2253

    Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service …

  • Unscored —
    CVE-2014-2255

    Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service …

  • Unscored —
    CVE-2014-2257

    Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service …

  • Unscored —
    CVE-2014-2259

    Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service …

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References