CVE-2014-2250 | BDVDB-2026-60558 Detail

Description#

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf
http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02
https://cert-portal.siemens.com/productcert/pdf/ssa-654382.pdf

Exploit#

No public exploit known

History#

Version 12014-03-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.