Siemens SIMATIC S7-1200 CPUs Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the web interface of SIMATIC S7-1200 CPUs prior to version 4.7, including SIPLUS variants. This vulnerability allows an unauthenticated attacker to manipulate the CPU mode by deceiving a legitimate user with the necessary permissions to click on a malicious link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the CPU mode, potentially disrupting operations or causing unintended behavior in automated processes.

Remediation

Users are advised to update to version 4.7 or later. Specific product remediations can be found in the Siemens Security Advisory SSA-717113.