CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.
References
Link | Resource |
---|---|
http://ics-cert.us-cert.gov/advisories/ICSA-14-114-02 | US Government Resource |
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-892012.pdf | Vendor Advisory |
https://cert-portal.siemens.com/productcert/pdf/ssa-892012.pdf |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2014-04-25 05:12
Updated : 2024-02-28 12:20
NVD link : CVE-2014-2909
Mitre link : CVE-2014-2909
CVE.ORG link : CVE-2014-2909
JSON object : View
Products Affected
siemens
- simatic_s7_cpu-1211c
- simatic_s7_cpu_1215c
- simatic_s7_cpu_1217c
- simatic_s7_cpu_1212c
- simatic_s7_cpu_1200_firmware
- simatic_s7_cpu_1214c
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')