CVE-2013-2780

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).

Score

CVSS 2.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2013-04-22

Last modified

2024-08-06

Affected products

• Simatic S7-1200 Cpu 1211c Firmware (Siemens)
• Simatic S7-1200 Cpu 1212c Firmware (Siemens)
• Simatic S7-1200 Cpu 1212fc Firmware (Siemens)
• Simatic S7-1200 Cpu 1214 Fc Firmware (Siemens)
• Simatic S7-1200 Cpu 1214c Firmware (Siemens)
• Simatic S7-1200 Cpu 1215 Fc Firmware (Siemens)
• Simatic S7-1200 Cpu 1215c Firmware (Siemens)
• Simatic S7-1200 Cpu 1217c Firmware (Siemens)
• Simatic S7-1200 Firmware (Siemens)

References

• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-724606.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf