Skip to content
OpenAdvisories
High SSA-625789 2 CVEs

SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices

Published Jun 10, 2011 · Updated Oct 14, 2025 · Revision 5

Vendor: Siemens Product: SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) Product: SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)

Summary

SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker

- to trigger functions by record and playback of legitimate network communication, or
- to place the controller in stop/defect state by causing a communications error.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Revision history

  1. #5

    Assigned CVE IDs (CVE-2011-20001/-20002) instead of the deprecated SVE IDs (SVE-2011-0001/-0002); Corrected CVSS vector of CVE-2011-20002; Updated SSA to current data model and support of csaf

  2. #4

    SIPLUS devices now explicitly mentioned in the list of affected products

  3. #3

    Update of solution section by removing mentioning of air gap

  4. #2

    Modification of CVSS scoring, solution and version information

  5. #1

    Publication Date

References