CVE-2014-2250

2014-03-2414:20:39

CWE-310

mitre

web.nvd.nist.gov

siemens

simatic s7-1200

cpu

plc

firmware

cve-2014-2250

vulnerability

hijack sessions

cryptographic protection

remote attackers

nvd.

CVSS2

8.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

77.7%

JSON

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251.

Affected configurations

Nvd

Node

siemenssimatic_s7_cpu_1200_firmwareRange≤3.0.2

siemenssimatic_s7_cpu_1200_firmwareMatch3.0

AND

siemenssimatic_s7_cpu-1211cMatch-

siemenssimatic_s7_cpu_1212cMatch-

siemenssimatic_s7_cpu_1214cMatch-

siemenssimatic_s7_cpu_1215cMatch-

siemenssimatic_s7_cpu_1217cMatch-

VendorProductVersionCPE
siemenssimatic_s7_cpu_1200_firmware*cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware:*:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1200_firmware3.0cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware:3.0:*:*:*:*:*:*:*
siemenssimatic_s7_cpu-1211c-cpe:2.3:h:siemens:simatic_s7_cpu-1211c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1212c-cpe:2.3:h:siemens:simatic_s7_cpu_1212c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1214c-cpe:2.3:h:siemens:simatic_s7_cpu_1214c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1215c-cpe:2.3:h:siemens:simatic_s7_cpu_1215c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1217c-cpe:2.3:h:siemens:simatic_s7_cpu_1217c:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siemens	simatic_s7_cpu_1200_firmware	*	cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware::::::::
siemens	simatic_s7_cpu_1200_firmware	3.0	cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware:3.0:::::::*
siemens	simatic_s7_cpu-1211c	-	cpe:2.3:h:siemens:simatic_s7_cpu-1211c:-:::::::*
siemens	simatic_s7_cpu_1212c	-	cpe:2.3:h:siemens:simatic_s7_cpu_1212c:-:::::::*
siemens	simatic_s7_cpu_1214c	-	cpe:2.3:h:siemens:simatic_s7_cpu_1214c:-:::::::*
siemens	simatic_s7_cpu_1215c	-	cpe:2.3:h:siemens:simatic_s7_cpu_1215c:-:::::::*
siemens	simatic_s7_cpu_1217c	-	cpe:2.3:h:siemens:simatic_s7_cpu_1217c:-:::::::*