CVE-2011-20002
Description
A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.2). Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.
How to fix
- Siemens SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)V2.0.2 or later
- Siemens SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants)V2.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) | v < V2.0.2 | V2.0.2 |
| Siemens SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) | v < V2.0.2 | V2.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.