{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-47100","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","state":"PUBLISHED","assignerShortName":"siemens","dateReserved":"2024-09-18T17:02:51.295Z","datePublished":"2025-01-14T10:30:11.506Z","dateUpdated":"2025-01-14T14:33:39.216Z"},"containers":{"cna":{"providerMetadata":{"orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","shortName":"siemens","dateUpdated":"2025-01-14T10:30:11.506Z"},"descriptions":[{"lang":"en","value":"A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211-1AE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/Rly (6ES7211-1HE40-0XB0), SIMATIC S7-1200 CPU 1212C AC/DC/Rly (6ES7212-1BE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/DC (6ES7212-1AE40-0XB0), SIMATIC S7-1200 CPU 1212C DC/DC/Rly (6ES7212-1HE40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/DC (6ES7212-1AF40-0XB0), SIMATIC S7-1200 CPU 1212FC DC/DC/Rly (6ES7212-1HF40-0XB0), SIMATIC S7-1200 CPU 1214C AC/DC/Rly (6ES7214-1BG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/DC (6ES7214-1AG40-0XB0), SIMATIC S7-1200 CPU 1214C DC/DC/Rly (6ES7214-1HG40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/DC (6ES7214-1AF40-0XB0), SIMATIC S7-1200 CPU 1214FC DC/DC/Rly (6ES7214-1HF40-0XB0), SIMATIC S7-1200 CPU 1215C AC/DC/Rly (6ES7215-1BG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/DC (6ES7215-1AG40-0XB0), SIMATIC S7-1200 CPU 1215C DC/DC/Rly (6ES7215-1HG40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/DC (6ES7215-1AF40-0XB0), SIMATIC S7-1200 CPU 1215FC DC/DC/Rly (6ES7215-1HF40-0XB0), SIMATIC S7-1200 CPU 1217C DC/DC/DC (6ES7217-1AG40-0XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-2XB0), SIPLUS S7-1200 CPU 1212 AC/DC/RLY (6AG1212-1BE40-4XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-2XB0), SIPLUS S7-1200 CPU 1212 DC/DC/RLY (6AG1212-1HE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-2XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC (6AG1212-1AE40-4XB0), SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL (6AG2212-1AE40-1XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-2XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-4XB0), SIPLUS S7-1200 CPU 1214 AC/DC/RLY (6AG1214-1BG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/DC (6AG1214-1AG40-5XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-2XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-4XB0), SIPLUS S7-1200 CPU 1214 DC/DC/RLY (6AG1214-1HG40-5XB0), SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL (6AG2214-1AG40-1XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/DC (6AG1214-1AF40-5XB0), SIPLUS S7-1200 CPU 1214FC DC/DC/RLY (6AG1214-1HF40-5XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-2XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-4XB0), SIPLUS S7-1200 CPU 1215 AC/DC/RLY (6AG1215-1BG40-5XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/DC (6AG1215-1AG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-2XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-4XB0), SIPLUS S7-1200 CPU 1215 DC/DC/RLY (6AG1215-1HG40-5XB0), SIPLUS S7-1200 CPU 1215C DC/DC/DC (6AG1215-1AG40-5XB0), SIPLUS S7-1200 CPU 1215FC DC/DC/DC (6AG1215-1AF40-5XB0). The web interface of the affected devices is vulnerable to Cross-Site Request Forgery (CSRF) attacks. This could allow an unauthenticated attacker to change the CPU mode by tricking a legitimate and authenticated user with sufficient permissions on the target CPU to click on a malicious link."}],"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C AC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C AC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212FC DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212FC DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C AC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214FC DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214FC DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C AC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215FC DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215FC DC/DC/Rly","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1217C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214FC DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214FC DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215C DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215FC DC/DC/DC","versions":[{"status":"affected","version":"0","lessThan":"V4.7","versionType":"custom"}],"defaultStatus":"unknown"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C","baseScore":7.1,"baseSeverity":"HIGH"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":7.2,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-352","description":"CWE-352: Cross-Site Request Forgery (CSRF)","type":"CWE"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-717113.html"}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-14T14:32:19.691890Z","id":"CVE-2024-47100","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-01-14T14:33:39.216Z"}}]}}