CVE-2013-0700

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-22 · updated 2026-06-16

Description

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).

Affected products

Siemens Simatic S7-1200 Cpu 1211C Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1212C Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1212Fc Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1214 Fc Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1214C Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1215 Fc Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1215C Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Cpu 1217C Firmware: before 4.0 — fixed in 4.0
Siemens Simatic S7-1200 Firmware: before 4.0 — fixed in 4.0

How to fix

Upgrade to a fixed version: Siemens Simatic S7-1200 Cpu 1211C Firmware 4.0; Siemens Simatic S7-1200 Cpu 1212C Firmware 4.0; Siemens Simatic S7-1200 Cpu 1212Fc Firmware 4.0; Siemens Simatic S7-1200 Cpu 1214 Fc Firmware 4.0; Siemens Simatic S7-1200 Cpu 1214C Firmware 4.0; Siemens Simatic S7-1200 Cpu 1215 Fc Firmware 4.0; Siemens Simatic S7-1200 Cpu 1215C Firmware 4.0; Siemens Simatic S7-1200 Cpu 1217C Firmware 4.0; Siemens Simatic S7-1200 Firmware 4.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2013-0700 or the next vulnerability affects your stack