CVE-2015-1048

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2015-01-21

Last modified

2024-08-06

Affected products

• Simatic S7 1200 Cpu Firmware (Siemens)

References

• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-597212.pdf