Summary
SIMATIC S7-1200 PLC, version V4.5.0 fails to authenticate against configured passwords when the affected device was provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC.
Siemens has released an update for SIMATIC S7-1200 and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fa…
Revision history
-
#2
Clarified that the use of TIA Portal V13 or later (not only V17 or later) could allow a successful attack
-
#1
Publication Date
References
-
SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf
-
SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-830194.txt