NVD

Id
30707  
Name
CVE-2014-2250  
Description
The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than CVE-2014-2251.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-19  
Published
2014-03-24  
Modified Date
2014-03-24  
Seq
2014-2250  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161857 30707 CVE-2014-2250 http://ics-cert.us-cert.gov/advisories/ICSA-14-079-02  View
161858 30707 CVE-2014-2250 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-654382.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12893 JVNDB-2014-001768 Siemens SIMATIC S7-1200 CPU PLC デバイスの乱数生成における暗号保護メカニズムを破られる脆弱性 Siemens SIMATIC S7-1200 CPU PLC デバイス (CPU ファームウェア 4.0 未満) の乱数生成は、エントロピー不足のため、暗号保護メカニズムを破られ、セッションをハイジャックされる脆弱性が存在します。 CVE-2014-2250 69537 CVE-2014-2250 30707 8.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001768.html 2014-03-20 2014-03-25 View