Replay Vulnerability in SIMATIC S7-1200 Series by Siemens

CVE-2011-20002

What is CVE-2011-20002?

A security flaw exists in the SIMATIC S7-1200 CPU series from Siemens, particularly affecting versions prior to V2.0.2. The vulnerability allows an on-path adversary to intercept and replay communications between engineering software and the controllers. This could enable unauthorized execution of previously recorded commands, such as stopping a controller, without requiring password authentication. The implications are significant, potentially leading to unauthorized control over industrial processes.

References