// For flags

CVE-2024-47100

 

Severity Score

7.2
*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). The web interface of the affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change the CPU mode by tricking a legitimate and authenticated user with sufficient permissions on the target CPU to click on a malicious link.

Se ha identificado una vulnerabilidad en SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), CPU SIMATIC S7-1200 1212FC CC/CC/CC (6ES7212-1AF40-0XB0), CPU SIMATIC S7-1200 1212FC CC/CC/Reproducción (6ES7212-1HF40-0XB0), CPU SIMATIC S7-1200 1214C CA/CC/Reproducción (6ES7214-1BG40-0XB0), CPU SIMATIC S7-1200 1214C CC/CC/CC (6ES7214-1AG40-0XB0), CPU SIMATIC S7-1200 1214C CC/CC/Reproducción (6ES7214-1HG40-0XB0), CPU SIMATIC S7-1200 1214FC CC/CC/CC (6ES7214-1AF40-0XB0), CPU SIMATIC S7-1200 1214FC CC/CC/Reproducción (6ES7214-1HF40-0XB0), CPU SIMATIC S7-1200 1215C CA/CC/Reproducción (6ES7215-1BG40-0XB0), CPU SIMATIC S7-1200 1215C CC/CC/CC (6ES7215-1AG40-0XB0), CPU SIMATIC S7-1200 1215C CC/CC/Reproducción (6ES7215-1HG40-0XB0), CPU SIMATIC S7-1200 1215FC CC/CC/CC (6ES7215-1AF40-0XB0), CPU SIMATIC S7-1200 1215FC CC/CC/Reproducción (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C CC/CC/CC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 CA/CC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 CA/CC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 CC/CC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 CC/CC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C CC/CC/CC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C CC/CC/CC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C CC/CC/CC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 CA/CC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 CA/CC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 CA/CC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 CC/CC/CC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 CC/CC/CC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 CC/CC/CC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 CC/CC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 CC/CC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 CC/CC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C CC/CC/CC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC CC/CC/CC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC CC/CC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 CA/CC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 CA/CC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 CA/CC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 CC/CC/CC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 CC/CC/CC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 CC/CC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 CC/CC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 CC/CC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C CC/CC/CC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC CC/CC/CC (6AG1215-1AF40-5XB0). La interfaz web de los dispositivos afectados es vulnerable a ataques de Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante no autenticado cambie el modo de la CPU engañando a un usuario legítimo y autenticado con permisos suficientes en la CPU de destino para que haga clic en un enlace malicioso.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
Passive
System
Vulnerable | Subsequent
Confidentiality
None
None
Integrity
High
None
Availability
High
None
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-09-18 CVE Reserved
  • 2025-01-14 CVE Published
  • 2025-01-14 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Siemens
Search vendor "Siemens"
 Simatic S7-1200
Search vendor "Siemens" for product "Simatic S7-1200"
*-
Affected
Siemens
Search vendor "Siemens"
 Siplus S7-1200
Search vendor "Siemens" for product "Siplus S7-1200"
*-
Affected