CVE-2012-3037: Siemens SIMATIC s7-1200 CPU 1211c Firmware

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

Affected products

• Siemens SIMATIC s7-1200 CPU 1211c Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1212c Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1212fc Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1214 Fc Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1214c Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1215 Fc Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1215c Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 CPU 1217c Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)
• Siemens SIMATIC s7-1200 Firmware: from 2.0.0, before 3.0.0 (fixed in 3.0.0)

Published 2012-09-25. Last modified 2026-06-16.