Total vulnerabilities in the database
The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.
| Software | From | Fixed in |
|---|---|---|
| siemens / simatic_s7-1200_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1211c_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1212c_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1212fc_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1214_fc_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1214c_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1215_fc_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1215c_firmware | 2.0.0 | 3.0.0 |
| siemens / simatic_s7-1200_cpu_1217c_firmware | 2.0.0 | 3.0.0 |