CNNVD-202510-2061 Information

CNNVD ID

CNNVD-202510-2061

CVE-2011-20001

  • CNNVD Published: 2025-10-14

Description (Chinese)

Siemens SIMATIC S7-1200 CPU V1 family和Siemens SIMATIC S7-1200 CPU V2 family都是德国西门子(Siemens)公司的一系列可编程逻辑控制器。 Siemens SIMATIC S7-1200 CPU V1 family和Siemens SIMATIC S7-1200 CPU V2 family存在输入验证错误漏洞,该漏洞源于Web服务器接口处理高速畸形HTTP流量不当,可能导致未经认证的远程攻击者强制设备进入停止或故障状态,造成拒绝服务。

Description (English)

Siemens SIMATIC S7-1200 CPU V1 family and Siemens SIMATIC S7-1200 CPU V2 family are a series of programmable logical controllers for Siemens, Germany. Siemens SIMATIC S7-1200 CPU V1 family and Siemens SIMATIC S7-1200 CPU V2 family have input validation bugs, which stem from the inappropriate HTTP traffic of the Web server interface to handle high-speed malformations, which may result in unauthorized remote assailants forcing equipment to stop or fail, resulting in the denial of services.

Hazard Level

Medium

Vulnerability Type

输入验证错误

Affected Vendor

西门子

Published

2025-10-14

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-625789.html

Patch

https://www.siemens.com/global/en/products/services/cert.html#SiemensSecurityAdvisories

Share on: