Medium WID-SEC-2025-0312 3 CVEs

Siemens SIMATIC S7: Mehrere Schwachstellen

Published Feb 10, 2025 · Updated Feb 10, 2025 · de-DE

Vendor: Siemens Product: SIMATIC S7

Summary

Ein Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.

Product

Die SIMATIC S7 ist eine Serie von SPS (Speicherprogrammierbare Steuerungen) für Automatisierungsanwendungen.

Vulnerabilities 3

High 7.5

CVE-2025-24811

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 12…

Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly SIMATIC S7-1200 CPU 1211C DC/DC/DC SIMATIC S7-1200 CPU 1214C DC/DC/Rly ICS / OT

Feb 11, 2025
Medium 6.5

CVE-2025-24812

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), …

Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly SIMATIC S7-1200 CPU 1212FC DC/DC/Rly SIMATIC S7-1200 CPU 1211C AC/DC/Rly ICS / OT

Feb 11, 2025
Medium 5.3

CVE-2023-37482

The login functionality of the web server in affected devices does not normalize the response times of login attempts. …

Siemens SIMATIC S7-1500 CPU 1515-2 PN SIMATIC S7-1500 CPU 1511T-1 PN SIMATIC S7-1500 CPU 1515T-2 PN ICS / OT

Feb 11, 2025

Revision history

2025-02-10 #1
Initiale Fassung

References

Siemens Security Advisory SSA-224824 V1.0 vom 2025-02-10
https://cert-portal.siemens.com/productcert/html/ssa-224824.html
Siemens Security Advisory SSA-195895 V1.0 vom 2025-02-10
https://cert-portal.siemens.com/productcert/html/ssa-195895.html