CVE-2012-3040
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x...
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
- Record
CVE-2012-3040- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
- Record
CVE-2012-3040- Updated
- 2026-11-02
EUVDEUVD-2012-3018
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
- Record
EUVD-2012-3018- CVSS
- 0.0 None
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-53gc-p44w-x4v4 No score
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x...
Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.
- Record
GHSA-53gc-p44w-x4v4- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
- siemens simatic s7-1200 cpu 1211c firmware
- siemens simatic s7-1200 cpu 1212c firmware
- siemens simatic s7-1200 cpu 1212fc firmware
- siemens simatic s7-1200 cpu 1214 fc firmware
- siemens simatic s7-1200 cpu 1214c firmware
- siemens simatic s7-1200 cpu 1215 fc firmware
- siemens simatic s7-1200 cpu 1215c firmware
- siemens simatic s7-1200 cpu 1217c firmware
- siemens simatic s7-1200 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3040 is a medium vulnerability (CVSS 4.3) in Siemens Simatic S7-1200 Cpu 1211c Firmware, published October 10, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. No source names a fixed version.
References
secunia.com/advisories/50816
us-cert.gov/control_systems/pdf/ICSA-12-283-01.pdf
siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-279823.pdf
osvdb.org/86130
en.securitylab.ru/lab/PT-2012-50
nvd.nist.gov/vuln/detail/CVE-2012-3040
github.com/advisories/GHSA-53gc-p44w-x4v4