CVE-2014-5074

Siemens SIMATIC S7-1500 CPU Firmware < 1.6 - Denial of Service via Crafted TCP Packets

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-5074. PoCs published by t4rkd3vilz.

AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in Siemens SIMATIC S7-1500 CPU by sending malformed packets to TCP port 102. The script repeatedly sends a crafted string to trigger the DoS condition.

Description

Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.

Exploits (1)

exploitdb WORKING POC
by t4rkd3vilz · pythondoslinux
https://www.exploit-db.com/exploits/44693

This exploit targets a denial-of-service vulnerability in Siemens SIMATIC S7-1500 CPU by sending malformed packets to TCP port 102. The script repeatedly sends a crafted string to trigger the DoS condition.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Siemens SIMATIC S7-1500 CPU all versions before V1.6
No auth needed
Prerequisites: Network access to TCP port 102 of the target device
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Patch, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-14-226-01
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/44693/

Scores

EPSS 0.0970
EPSS Percentile 94.9%

Details

Status published
Products (13)
siemens/simatic_s7-1500_cpu_firmware 1.0.1
siemens/simatic_s7-1500_cpu_firmware 1.1.0
siemens/simatic_s7-1500_cpu_firmware 1.1.1
siemens/simatic_s7-1500_cpu_firmware 1.1.2
siemens/simatic_s7-1500_cpu_firmware 1.5
siemens/simatic_s7-1500_cpu_firmware < 1.5.1
siemens/simatic_s7-1511-1_pn_cpu
siemens/simatic_s7-1513-1_pn_cpu
siemens/simatic_s7-1515-2_pn_cpu
siemens/simatic_s7-1516-3_pn\/dp_cpu
... and 3 more
Published Aug 17, 2014
Tracked Since Feb 18, 2026