جزئیات آسیب‌پذیری

CVE-2025-24812

Siemens SIMATIC S7-1200 CPU 1211C AC/DC/RlySiemens SIMATIC S7-1200 CPU 1211C DC/DC/DCSiemens SIMATIC S7-1200 CPU 1211C DC/DC/RlySiemens SIMATIC S7-1200 CPU 1212C AC/DC/RlySiemens SIMATIC S7-1200 CPU 1212C DC/DC/DCSiemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly
CVSS 4.0
7.1بالا

شرح رسمی (انگلیسی)

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0) (All versions < V4.7), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0) (All versions < V4.7), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0) (All versions < V4.7). Affected devices do not process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.1بالا 4.0 CVEProject cvelistV5 (CNA) (siemens) CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
6.5متوسط 3.1 CVEProject cvelistV5 (CNA) (siemens) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215C DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1200 CPU 1215FC DC/DC/DC v < V4.7 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۱۱/۲۳
آخرین به‌روزرسانی
۱۴۰۳/۱۱/۲۵
وضعیت
منتشرشده
صادرکننده (CNA)
siemens

پیش‌بینی بهره‌برداری (EPSS)

۰٫۵۴٪
احتمال بهره‌برداری در ۳۰ روز
۴۶٫۱٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-1286
    Improper Validation of Syntactic Correctness of Input