Lucene search

K
cveMitreCVE-2014-2256
HistoryMar 24, 2014 - 2:20 p.m.

CVE-2014-2256

2014-03-2414:20:39
CWE-399
mitre
web.nvd.nist.gov
40
siemens
s7-1200
plc
firmware
vulnerability
denial of service
iso-tsap
nvd
cve-2014-2256

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.007

Percentile

80.3%

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257.

Affected configurations

Nvd
Node
siemenssimatic_s7_cpu_1200_firmwareRange≀3.0.2
OR
siemenssimatic_s7_cpu_1200_firmwareMatch3.0
AND
siemenssimatic_s7_cpu-1211cMatch-
OR
siemenssimatic_s7_cpu_1212cMatch-
OR
siemenssimatic_s7_cpu_1214cMatch-
OR
siemenssimatic_s7_cpu_1215cMatch-
OR
siemenssimatic_s7_cpu_1217cMatch-
VendorProductVersionCPE
siemenssimatic_s7_cpu_1200_firmware*cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware:*:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1200_firmware3.0cpe:2.3:o:siemens:simatic_s7_cpu_1200_firmware:3.0:*:*:*:*:*:*:*
siemenssimatic_s7_cpu-1211c-cpe:2.3:h:siemens:simatic_s7_cpu-1211c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1212c-cpe:2.3:h:siemens:simatic_s7_cpu_1212c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1214c-cpe:2.3:h:siemens:simatic_s7_cpu_1214c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1215c-cpe:2.3:h:siemens:simatic_s7_cpu_1215c:-:*:*:*:*:*:*:*
siemenssimatic_s7_cpu_1217c-cpe:2.3:h:siemens:simatic_s7_cpu_1217c:-:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.007

Percentile

80.3%