CVE-2014-2909

MEDIUM · 5.8 CVSS Gepubliceerd: 25-04-2014 CWE-94

Beschrijving

CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.

Vendors

Siemens

Affected products

Simatic S7 Cpu 1200 Firmware Simatic S7 Cpu-1211c Simatic S7 Cpu 1212c Simatic S7 Cpu 1214c Simatic S7 Cpu 1215c Simatic S7 Cpu 1217c

References

ics-cert.us-cert.gov
www.siemens.com
cert-portal.siemens.com