CVE-2012-3040: Siemens SIMATIC s7-1200 CPU 1211c Firmware

Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.

Affected products

• Siemens SIMATIC s7-1200 CPU 1211c Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1212c Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1212fc Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1214 Fc Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1214c Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1215 Fc Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1215c Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 CPU 1217c Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)
• Siemens SIMATIC s7-1200 Firmware: from 2.0.0, before 3.0.2 (fixed in 3.0.2)

Published 2012-10-10. Last modified 2026-06-16.