Summary
SIMATIC S7-1200 CPU family before V4.7 is affected by two denial of service vulnerabilities.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 2
-
High 7.5
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 12…
-
Medium 6.5
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), …
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-224824: Denial of Service Vulnerabilities in SIMATIC S7-1200 CPU Family Before V4.7 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-224824.html
-
ICS Advisory ICSA-25-044-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B