Skip to content
OpenAdvisories
Critical SSA-279823 1 CVE

SSA-279823: Cross-Site Scripting Vulnerability in SIMATIC S7-1200 CPU V2/V3 Before V3.0.2

Published Oct 8, 2012 · Updated Oct 14, 2025 · Revision 3

Vendor: Siemens Product: SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) Product: SIMATIC S7-1200 CPU V3 family (incl. SIPLUS variants)

Summary

The web server on SIMATIC S7-1200 CPU V2/V3 Before V3.0.2 contains a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via a crafted URI.

Siemens has released a new version for SIMATIC S7-1200 CPU V3 family (incl. SIPLUS variants) and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • Unscored —
    CVE-2012-3040

    Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows rem…

Revision history

  1. #3

    Used CVE ID (CVE-2012-3040) instead of the deprecated SVE ID (SVE-2012-0004); Corrected CVSS vector of CVE-2012-3040; Updated SSA to current data model and support of csaf

  2. #2

    SIPLUS devices now explicitly mentioned in the list of affected products

  3. #1

    Publication Date

References