Siemens SIMATIC S7-1200 CPUs Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been identified in various models of the Siemens SIMATIC S7-1200 CPU family, including SIPLUS variants, prior to version 4.7. The issue arises from the incorrect processing of specially crafted packets sent to port 80/tcp, which can allow an unauthenticated attacker to disrupt the device's operation.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition on the affected device, causing it to become unresponsive or unavailable.

Remediation

Users are advised to update to version 4.7 or later. For more information, visit the Siemens Industry Support page.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
2.5
exploitability
7.8
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
10.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.