Cross-site Scripting Vulnerability in Siemens SIMATIC S7-1500 PLC
CVE-2014-2246

Currently unrated

Key Information:

Vendor
Siemens
Status
Simatic S7-1500 Cpu Firmware
Vendor
CVE Published:
16 March 2014

Summary

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices is vulnerable to cross-site scripting (XSS), which allows remote attackers to inject arbitrary web scripts or HTML. This can be exploited through unspecified vectors, potentially compromising the security of the device and the broader ecosystem. Organizations using these PLCs should assess their firmware version and apply any necessary security patches to mitigate risks associated with this vulnerability.

References

http://www.securityfocus.com/bid/66201
vdb-entryx_refsource_BID
http://www.siemens.com/innovation/pool/de/forschungsfelde...
x_refsource_CONFIRM
http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.