Description
The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.
Advisories 2
- SSA-240718 SSA-240718: Insecure Storage of HTTPS CA Certificate in SIMATIC S7-1200 CPU V2 Siemens ProductCERT · Oct 14, 2025
- ICSA-12-263-01 Siemens S7-1200 Insecure Storage of HTTPS CA Certificate CISA ICS & IT advisories · Jun 5, 2025