Unscored severity · published Jan 21, 2015
CVE-2015-1048
Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Simatic S7 1200 Cpu Firmware · Siemens
through 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1048
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1048
Vendor Advisory
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-597212.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-597212.pdf
More from Simatic S7 1200 Cpu Firmware
7.5
CVE-2023-28831
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during…
7.5
CVE-2021-37172
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl
7.5
CVE-2019-10936
Affected devices improperly handle large amounts of specially crafted UDP packets
–
CVE-2015-5698
Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote attackers to hijack the…