CNVD-2015-00585 | Vulnetix

CNVD-2015-00585 PUBLISHED

Siemens SIMATIC S7-1200是模块化PLC控制器。 integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware 4.1之前的版本存在打开重定向漏洞，允许远程攻击者将用户重定向通过未指定向量重定向用户任意的 web站点并进行网络钓鱼攻击。

Affected Products

Vendor	Product	Versions
cnvd	SIEMENS SIMATIC S7-1200 <4.1
	SIEMENS SIMATIC S7-1200 <4.1

Timeline

Jan 22, 2015 CVE ID Reserved
Jan 22, 2015 CVE Updated
Jan 26, 2015 CVE Published

References

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf url
http://secunia.com/advisories/62233 url
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1048 url

Open in Interactive Console →