Open Redirect Vulnerability in Siemens SIMATIC S7-1200 Devices

CVE-2015-1048

Summary

An open redirect vulnerability exists in the integrated web server of Siemens SIMATIC S7-1200 CPU devices running firmware versions prior to 4.1. This security flaw allows remote attackers to exploit the web server, facilitating the redirection of users to malicious websites. Such vulnerabilities can lead to phishing attempts, significantly compromising user security by unwittingly directing them to potentially harmful external addresses, ultimately heightening the risk of data theft and other malicious activities.

References