CVEvulnerability

CVE-2012-3037

4.3 MEDIUM Published 2012-09-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-295

Description

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

Affected configurations

• siemens simatic s7-1200 firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1211c firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1212c firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1212fc firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1214 fc firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1214c firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1215 fc firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1215c firmware (>= 2.0.0 < 3.0.0) • siemens simatic s7-1200 cpu 1217c firmware (>= 2.0.0 < 3.0.0)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References