CVE-2011-20001
High
Description
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)
PublishedOct 14, 2025
First seenOct 14, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- Siemens SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)V2.0.3 or later
- Siemens SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)V2.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) | v < V2.0.3 | V2.0.3 |
| Siemens SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) | v < V2.0.3 | V2.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.