CVE-2014-2250

Currently unrated

Key Information:

Vendor
Siemens
Status
Simatic S7 Cpu 1200 Firmware
Simatic S7 Cpu-1211c
Simatic S7 Cpu 1212c
Simatic S7 Cpu 1214c
Vendor
CVE Published:
24 March 2014

Summary

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251.

References

http://www.siemens.com/innovation/pool/de/forschungsfelde...
x_refsource_CONFIRM
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02
x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/ssa-65438...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.