Simatic S7 1200 Cpu V2 Family (Incl. Siplus Variants)
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_s7-1200_cpu_v2_family_(incl._siplus_variants):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic S7 1200 Cpu V2 Family (Incl. Siplus Variants) (d48e6d73-d0a6-5f2f-82ae-6f4deb85135e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-20002 |
vulnerable | 2026-06-08 04:58:03.420656 |
Details available
HIGH (7.4)
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.2). Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.
Published: 2025-10-14T09:14:55.159Z
Updated: 2025-10-14T18:58:30.327Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-20001 |
vulnerable | 2026-06-08 04:58:03.420267 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.
Published: 2025-10-14T09:14:53.944Z
Updated: 2025-10-14T18:57:37.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.