Skip to content
OpenAdvisories
Medium SSA-876787 1 CVE

SSA-876787: Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs

Published Oct 8, 2024 · Updated Oct 14, 2025 · Revision 10

Vendor: Siemens Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) Product: SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs Product: SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) Product: SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) Product: SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0) Product: SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0) Product: SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0) Product: SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0) Product: SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0) Product: SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0) Product: SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0) Product: SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0) Product: SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0) Product: SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0) Product: SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0) Product: SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0) +119 more

Summary

Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitimate user must actively click on an attacker-crafted link.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #10

    Expanded SIMATIC ET 200SP Open Controller CPU 1515SP PC2 for V2 and V3 CPUs

  2. #9

    Clarified that currently no fix for CVE-2024-46886 is available for SIMATIC S7-1500 Software Controller Linux V3

  3. #8

    Added fix for SIMATIC S7-1500 Software Controller that run on firmware version line V2 and added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V2 CPUs

  4. #7

    Added fix for all S7-1500 CPUs that run on firmware version line V2

  5. #6

    Added fix for SIMATIC S7-1500 Software Controller V3 and updated several product names

  6. #5

    Added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)

  7. #4

    Added fix for SIMATIC S7-PLCSIM Advanced

  8. #3

    Added fix for SIMATIC S7-1200 CPU family V4 (incl. SIPLUS variants)

  9. #2

    Added fix for SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, CPU 1518-4 PN/DP MFP, CPU 1518F-4 PN/DP MFP, CPU 1518F-4 PN/DP MFP and CPU 1518-4 PN/DP MFP. Added SIPLUS variants for S7-1200 CPUs

  10. #1

    Publication Date

References