CSRF Vulnerability in Siemens SIMATIC S7-1200 CPU Devices

CVE-2015-5698

Summary

A CSRF vulnerability has been identified in the web server of Siemens SIMATIC S7-1200 CPU devices running firmware prior to version 4.1.3. This flaw enables remote attackers to manipulate the authentication of users, potentially leading to unauthorized actions. Attackers can exploit this vulnerability via unspecified methods, posing significant risks to the security of the networked systems using these devices.

References