8.3

CVE-2014-2250

EPSS 1.44%
Published 24.03.2014 14:20:39
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Siemens ≫ Simatic S7 Cpu 1200 Firmware Version <= 3.0.2

Siemens ≫ Simatic S7 Cpu 1200 Firmware Version3.0

Siemens ≫ Simatic S7 Cpu-1211c Version-

Siemens ≫ Simatic S7 Cpu 1212c Version-

Siemens ≫ Simatic S7 Cpu 1214c Version-

Siemens ≫ Simatic S7 Cpu 1215c Version-

Siemens ≫ Simatic S7 Cpu 1217c Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.44%	0.799

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.3	8.6	8.5	AV:N/AC:M/Au:N/C:P/I:P/A:C

http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02

US Government Resource

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf

https://nvd.nist.gov/vuln/detail/CVE-2014-2250

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-2250

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-2250

EUVD