CVE-2014-5074

Siemens Simatic S7-1500 Cpu Firmware < 1.5.1 - Denial of Service

Title source: rule

Description

Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.

Exploits (1)

exploitdb WORKING POC

by t4rkd3vilz · pythondoslinux

https://www.exploit-db.com/exploits/44693

View Code ZIP pw:eip

References (4)

[Patch, US Government Resource] https://ics-cert.us-cert.gov/advisories/ICSA-14-226-01

[Patch, Vendor Advisory] http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-310688.pdf

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/44693/

[Vendor Advisory] https://cert-portal.siemens.com/productcert/pdf/ssa-310688.pdf

Scores

EPSS 0.1288

EPSS Percentile 94.1%

Details

Status published

Products (13)

siemens/simatic_s7-1500_cpu_firmware 1.0.1

siemens/simatic_s7-1500_cpu_firmware 1.1.0

siemens/simatic_s7-1500_cpu_firmware 1.1.1

siemens/simatic_s7-1500_cpu_firmware 1.1.2

siemens/simatic_s7-1500_cpu_firmware 1.5

siemens/simatic_s7-1500_cpu_firmware < 1.5.1

siemens/simatic_s7-1511-1_pn_cpu

siemens/simatic_s7-1513-1_pn_cpu

siemens/simatic_s7-1515-2_pn_cpu

siemens/simatic_s7-1516-3_pn\/dp_cpu

... and 3 more

Published Aug 17, 2014

Tracked Since Feb 18, 2026