NVD

Id
30708  
Name
CVE-2014-2251  
Description
The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-19  
Published
2014-03-16  
Modified Date
2014-03-25  
Seq
2014-2251  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161859 30708 CVE-2014-2251 http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01  View
161860 30708 CVE-2014-2251 http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12835 JVNDB-2014-001710 Siemens SIMATIC S7-1500 CPU PLC デバイスの乱数生成における暗号保護メカニズムを破られる脆弱性 Siemens SIMATIC S7-1500 CPU PLC デバイスファームウェアの乱数生成は、エントロピー不足のため、暗号保護メカニズムを破られ、セッションをハイジャックされる脆弱性が存在します。 CVE-2014-2251 69538 CVE-2014-2251 30708 8.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001710.html 2014-03-12 2014-03-18 View