CVE-2012-3040

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 10-10-2012 08:55

Last modified: - 01-02-2022 04:16

Total changes: - 2

Description

Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:P/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

None

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

4.3

Base score

8.6

2.9

Exploitability score

Impact score

Verification logic

AND

vendor=siemens AND product=simatic_s7-1200_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200 AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1211c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1211c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1212c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1212c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1212fc_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1212fc AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1214_fc_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1214_fc AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1214c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1214c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1215_fc_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1215_fc AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1215c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1215c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1217c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.2

vendor=siemens AND product=simatic_s7-1200_cpu_1217c AND version=-

Reference

http://www.us-cert.gov/control_systems/pdf/ICSA-12-283-01.pdf
http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-279823.pdf
86130-Broken Link
http://en.securitylab.ru/lab/PT-2012-50
50816-Third Party Advisory

Keywords

CVE-2012-3040

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2012-3040

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures