CVE-2012-3037

Currently unrated

Key Information:

Vendor
Siemens
Status
Simatic S7-1200 Firmware
Vendor
CVE Published:
25 September 2012

Summary

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

References

http://www.siemens.com/corporate-technology/pool/de/forsc...
x_refsource_CONFIRM
http://www.us-cert.gov/control_systems/pdf/ICSA-12-263-01...
x_refsource_MISC
http://en.securitylab.ru/lab/PT-2012-48
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.