PT-2015-1327 · Siemens · Simatic S7-1200 Cpu

Publicado

2015-01-21

·

Atualizado

2020-02-10

·

CVE-2015-1048

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1
Description The issue allows a remote attacker to redirect users to arbitrary web sites, potentially leading to phishing attacks. This is achieved through an open redirect vulnerability in the integrated web server.
Recommendations For Siemens SIMATIC S7-1200 CPU devices with firmware prior to 4.1, update the firmware to version 4.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the integrated web server to minimize the risk of exploitation.

Correção

Open Redirect

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

BDU:2015-10401
CVE-2015-1048

Produtos afetados

Simatic S7-1200 Cpu