Siemens SIMATIC s7 1200 CPU Firmware vulnerabilities

2 CVEs affecting Siemens SIMATIC s7 1200 CPU Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5698, published 2015-08-30.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-5698, published 2015-08-30. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the authentication of unspecified…
• CVE-2015-1048, published 2015-01-21. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct…