[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKK9_nt56-D74TxkkemRm9N4E-KV57bfp7Ofcz04oCQc":3,"g5a-ex:siemens\u002Fsimatic_s7-1200_firmware@*":103,"g5a-family:siemens\u002Fsimatic_s7-1200_firmware":105},{"success":4,"data":5},true,{"product":6,"versions":20,"topVulnerabilitiesByEpss":23,"kevVulnerabilities":80,"seoMetadata":81,"meta":100},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":19},"siemens","simatic_s7-1200_firmware",2,10,0,"2021-07-13",[14,17],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.1",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.3","Simatic S7-1200 Firmware by Siemens is a technology product with 2 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[21,22],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},[24,32,40,46,49,53,59,64,70,74],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":31},"CVE-2017-12741","Specially crafted packets sent to port 161\u002Fudp could cause a denial of service condition. The affected devices must be restarted manually.","2017-12-26",7.5,"v3.1","High",0.03315,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":16,"epssScore":39},"CVE-2012-3040","Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.","2012-10-10",4.3,"v2","Medium",0.02556,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":37,"severity":30,"isKev":16,"epssScore":45},"CVE-2013-0700","Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).","2013-04-22",7.8,0.02392,{"cveId":47,"description":48,"publishedDate":43,"cvssScore":44,"cvssVersion":37,"severity":30,"isKev":16,"epssScore":45},"CVE-2013-2780","Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka the SNMP port).",{"cveId":50,"description":51,"publishedDate":12,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":52},"CVE-2020-28400","Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.",0.01856,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":28,"cvssVersion":57,"severity":30,"isKev":16,"epssScore":58},"CVE-2018-13815","A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions \u003C V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to the device. Successful exploitation requires an attacker to be able to send packets to port 102\u002Ftcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. The vulnerability, if exploited, could cause a Denial-of-Service condition impacting the availability of the system. At the time of advisory publication no public exploitation of this vulnerability was known.","2018-12-13","v3.0",0.01799,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":16,"epssScore":63},"CVE-2012-3037","The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.","2012-09-25",0.01472,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":29,"severity":38,"isKev":16,"epssScore":69},"CVE-2017-2680","Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.","2017-05-11",6.5,0.01149,{"cveId":71,"description":72,"publishedDate":67,"cvssScore":68,"cvssVersion":29,"severity":38,"isKev":16,"epssScore":73},"CVE-2017-2681","Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.",0.00906,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":29,"severity":38,"isKev":16,"epssScore":79},"CVE-2019-13945","A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family \u003C V4.x (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family V4.x (incl. SIPLUS variants) (All versions with Function State (FS) \u003C 11), SIMATIC S7-200 SMART CPU CR20s (6ES7 288-1CR20-0AA1) (All versions \u003C= V2.3.0 and Function State (FS) \u003C= 3), SIMATIC S7-200 SMART CPU CR30s (6ES7 288-1CR30-0AA1) (All versions \u003C= V2.3.0 and Function State (FS) \u003C= 3), SIMATIC S7-200 SMART CPU CR40 (6ES7 288-1CR40-0AA0) (All versions \u003C= V2.2.2 and Function State (FS) \u003C= 8), SIMATIC S7-200 SMART CPU CR40s (6ES7 288-1CR40-0AA1) (All versions \u003C= V2.3.0 and Function State (FS) \u003C= 3), SIMATIC S7-200 SMART CPU CR60 (6ES7 288-1CR60-0AA0) (All versions \u003C= V2.2.2 and Function State (FS) \u003C= 10), SIMATIC S7-200 SMART CPU CR60s (6ES7 288-1CR60-0AA1) (All versions \u003C= V2.3.0 and Function State (FS) \u003C= 3), SIMATIC S7-200 SMART CPU SR20 (6ES7 288-1SR20-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 11), SIMATIC S7-200 SMART CPU SR30 (6ES7 288-1SR30-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 10), SIMATIC S7-200 SMART CPU SR40 (6ES7 288-1SR40-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 10), SIMATIC S7-200 SMART CPU SR60 (6ES7 288-1SR60-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 12), SIMATIC S7-200 SMART CPU ST20 (6ES7 288-1ST20-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 9), SIMATIC S7-200 SMART CPU ST30 (6ES7 288-1ST30-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 9), SIMATIC S7-200 SMART CPU ST40 (6ES7 288-1ST40-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 8), SIMATIC S7-200 SMART CPU ST60 (6ES7 288-1ST60-0AA0) (All versions \u003C= V2.5.0 and Function State (FS) \u003C= 8), SIMATIC S7-200 SMART CPU family (All versions). There is an access mode used during manufacturing of the affected devices that allows additional diagnostic functionality. The security vulnerability could be exploited by an attacker with physical access to the UART interface during boot process.","2019-12-12",6.8,0.00528,[],{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Simatic S7-1200 Firmware by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic S7-1200 Firmware by Siemens covering 2 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic S7-1200 Firmware vulnerabilities, Simatic S7-1200 Firmware security, Simatic S7-1200 Firmware CVE, Siemens Simatic S7-1200 Firmware, Simatic S7-1200 Firmware threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":86,"@type":87,"name":88,"description":83,"url":89,"manufacturer":90,"applicationCategory":94,"softwareVersion":95,"mainEntity":96},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic S7-1200 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_s7-1200_firmware",{"@type":91,"name":92,"url":93},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","2 versions tracked",{"@type":97,"name":98,"description":99,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Simatic S7-1200 Firmware Security Vulnerabilities","Security vulnerabilities affecting Simatic S7-1200 Firmware by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":101,"apiVersion":102},"2026-10-19T02:33:47.578Z","3.0",{"rows":104,"total":11,"capped":16,"failed":11},[],[]]