Description
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) | < V2.0.3 | V2.0.3 |
| Siemens | SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) | < V2.0.3 | V2.0.3 |
Advisories 2
- ICSA-25-294-03 Siemens SIMATIC S7-1200 CPU V1/V2 Devices CISA ICS & IT advisories · Oct 14, 2025
- SSA-625789 SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices Siemens ProductCERT · Oct 14, 2025