PT-2014-6266 · Siemens · Simatic S7-1500 Cpu

Jameel Nabbo + 1 · Published 2014-08-17 · Updated 2018-05-25 · CVE-2014-5074

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1500 CPU devices versions prior to 1.6

Description The issue allows remote attackers to cause a denial of service, resulting in a device restart and STOP transition, via crafted TCP packets.

Recommendations For versions prior to 1.6, update the firmware to version 1.6 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2014-5074

Affected Products

Simatic S7-1500 Cpu

References · 5

• 🔥 https://exploit-db.com/exploits/44693 · Exploit
• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdf · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-14-226-01 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-5074 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-310688.pdf · Note