CVE-2014-2258

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets, a different vulnerability than CVE-2014-2259.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2014-03-24

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Simatic S7 Cpu-1211c (Siemens)
• Simatic S7 Cpu 1200 Firmware (Siemens)
• Simatic S7 Cpu 1212c (Siemens)
• Simatic S7 Cpu 1214c (Siemens)
• Simatic S7 Cpu 1215c (Siemens)
• Simatic S7 Cpu 1217c (Siemens)

References

• http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02
• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf