[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW5PjbCLCIp2_cXyrpJJVqUSBAKnEmazKJklmLCEHz5o":3,"g5a-ex:siemens\u002Fsimatic_s7-1200_cpu_1214c@*":93,"g5a-family:siemens\u002Fsimatic_s7-1200_cpu_1214c":95},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":70,"seoMetadata":71,"meta":90},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"siemens","simatic_s7-1200_cpu_1214c",0,17,"2022-12-13",[],"Simatic S7-1200 Cpu 1214c by Siemens is a technology product and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,39,42,48,53,57,60,65],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,"v3.1","Medium",false,0.63542,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":22,"isKev":23,"epssScore":31},"CVE-2012-3040","Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.","2012-10-10",4.3,"v2",0.02556,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":23,"epssScore":38},"CVE-2013-0700","Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).","2013-04-22",7.8,"High",0.02392,{"cveId":40,"description":41,"publishedDate":35,"cvssScore":36,"cvssVersion":30,"severity":37,"isKev":23,"epssScore":38},"CVE-2013-2780","Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).",{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":47},"CVE-2021-37204","A vulnerability has been identified in SIMATIC Drive Controller family (All versions \u003C V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 \u003C V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions \u003C V21.9), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 \u003C V21.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 Ready4Linux (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions \u003C V4.5.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 \u003C V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003C V2.9.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 \u003C V2.9.4), SIMATIC S7-1500 Software Controller (All versions \u003C V21.9), SIMATIC S7-1500 Software Controller (All versions >= V21.9 \u003C V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions \u003C V4.0), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 \u003C V4.0 SP1), SIPLUS TIM 1531 IRC (All versions \u003C V2.3.6), TIM 1531 IRC (All versions \u003C V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packet over port 102\u002Ftcp. A restart of the affected device is needed to restore normal operations.","2022-02-09",7.5,0.02181,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":52},"CVE-2019-10936","Affected devices improperly handle large amounts of specially crafted UDP packets.\r\n\r\nThis could allow an unauthenticated remote attacker to trigger a denial of service condition.","2019-10-10",0.02065,{"cveId":54,"description":55,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":56},"CVE-2021-37185","A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 \u003C V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V21.9 \u003C V21.9.4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.5.0 \u003C V4.5.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.9.2 \u003C V2.9.4), SIMATIC S7-1500 Software Controller (All versions >= V21.9 \u003C V21.9.4), SIMATIC S7-PLCSIM Advanced (All versions >= V4.0 \u003C V4.0 SP1), SIPLUS TIM 1531 IRC (All versions \u003C V2.3.6), TIM 1531 IRC (All versions \u003C V2.3.6). An unauthenticated attacker could cause a denial-of-service condition in a PLC when sending specially prepared packets over port 102\u002Ftcp. A restart of the affected device is needed to restore normal operations.",0.0206,{"cveId":58,"description":55,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":59},"CVE-2021-37205",0.0164,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":29,"cvssVersion":30,"severity":22,"isKev":23,"epssScore":64},"CVE-2012-3037","The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.","2012-09-25",0.01472,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":69},"CVE-2019-10929","A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions \u003C V20.8), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software V14 (All versions \u003C V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions \u003C V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions \u003C V2.8.1), SIMATIC S7-1500 Software Controller (All versions \u003C V20.8), SIMATIC S7-PLCSIM Advanced (All versions \u003C V3.0), SIMATIC STEP 7 (TIA Portal) (All versions \u003C V16), SIMATIC WinCC (TIA Portal) (All versions \u003C V16), SIMATIC WinCC OA (All versions \u003C V3.16 P013), SIMATIC WinCC Runtime Advanced (All versions \u003C V16), SIMATIC WinCC Runtime Professional (All versions \u003C V16), TIM 1531 IRC (incl. SIPLUS NET variants) (All versions \u003C V2.1). Affected devices contain a message protection bypass vulnerability due to certain properties in the calculation used for integrity protection. This could allow an attacker in a Man-in-the-Middle position to modify network traffic sent on port 102\u002Ftcp to the affected devices.","2019-08-13",0.00978,[],{"title":72,"metaDescription":73,"keywords":74,"structuredData":75},"Simatic S7-1200 Cpu 1214c by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic S7-1200 Cpu 1214c by Siemens with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic S7-1200 Cpu 1214c vulnerabilities, Simatic S7-1200 Cpu 1214c security, Simatic S7-1200 Cpu 1214c CVE, Siemens Simatic S7-1200 Cpu 1214c, Simatic S7-1200 Cpu 1214c threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":76,"@type":77,"name":78,"description":73,"url":79,"manufacturer":80,"applicationCategory":84,"softwareVersion":85,"mainEntity":86},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic S7-1200 Cpu 1214c","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_s7-1200_cpu_1214c",{"@type":81,"name":82,"url":83},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","Multiple versions",{"@type":87,"name":88,"description":89,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Simatic S7-1200 Cpu 1214c Security Vulnerabilities","Security vulnerabilities affecting Simatic S7-1200 Cpu 1214c by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":91,"apiVersion":92},"2026-10-18T21:31:06.118Z","3.0",{"rows":94,"total":9,"capped":23,"failed":9},[],[96],{"product":97,"cves":98},"simatic_s7-1200_cpu_1214c_firmware",16]