CVE-2012-3037

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 25-09-2012 01:07

Last modified: - 01-02-2022 03:58

Total changes: - 2

Description

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

None

Integrity

Privileges required

Scope

User interaction

4.3

Base score

8.6

2.9

Exploitability score

Impact score

Verification logic

AND

vendor=siemens AND product=simatic_s7-1200_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200 AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1211c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1211c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1212c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1212c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1212fc_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1212fc AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1214_fc_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1214_fc AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1214c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1214c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1215_fc_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1215_fc AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1215c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1215c AND version=-

AND

vendor=siemens AND product=simatic_s7-1200_cpu_1217c_firmware AND versionStartIncluding=2.0.0 AND versionEndExcluding=3.0.0

vendor=siemens AND product=simatic_s7-1200_cpu_1217c AND version=-

Reference

Keywords

CVE-2012-3037

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2012-3037

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures