Skip to main content

Simatic S7 1500 Cpu Firmware CVE-2014-2247

MEDIUM
2014-03-16 cve@mitre.org
Code Injection Siemens Simatic S7 1500 Cpu Firmware
5.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.8 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:P
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
Mar 16, 2014 - 14:06 cve.org
MEDIUM 5.8

DescriptionCVE.org

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors.

AnalysisAI

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.

Technical ContextAI

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors. Affected products include: Siemens Simatic S7-1500 Cpu Firmware. Version information: before 1.5.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Simatic S7 1500 Cpu Firmware

View all
CVE-2014-5074 HIGH POC
7.1 Aug 17

Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device
CVE-2016-2200 HIGH
7.5 Feb 08

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transiti
CVE-2014-2251 HIGH
8.3 Mar 16

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficie
CVE-2014-2259 HIGH
7.8 Mar 16

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (
CVE-2014-2255 HIGH
7.8 Mar 16

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (
CVE-2014-2257 HIGH
7.8 Mar 16

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (
CVE-2022-25622 HIGH
7.5 Apr 12

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP s
CVE-2019-10936 HIGH
7.5 Oct 10

Affected devices improperly handle large amounts of specially crafted UDP packets. Rated high severity (CVSS 7.5), this

CVE-2014-2253 MEDIUM
6.1 Mar 16

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (
CVE-2014-2249 MEDIUM
5.8 Mar 16

Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 an
CVE-2016-2201 MEDIUM
5.3 Feb 08

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via pack
CVE-2014-2248 MEDIUM
4.3 Mar 16

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before

Same technique Code Injection

View all
CVE-2012-0158 HIGH POC
8.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2025-24893 CRITICAL POC
9.8
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8
CVE-2018-1273 CRITICAL POC
9.8

Share

CVE-2014-2247 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy