CVE:CVE-2014-2250
CNNVD:CNNVD-201403-414
Siemens SIMATIC S7-1200 CPU PLC是德国西门子（Siemens）公司的一款应用于中小型自动化系统中的可编程逻辑控制器（PLC）。
使用3.0.2及之前版本固件的Siemens SIMATIC S7-1200 CPU PLC设备上的随机数生成器中存在安全漏洞，该漏洞源于随机数生成器没有充足的熵。远程攻击者可利用该漏洞破坏加密保护机制，劫持会话。
solution:Upgrade siemens simatic_s7_cpu_1200_firmware to a higher version than 3.0.2,3.0,and avoid the version (,3.0.2],3.0; Upgrade siemens simatic_s7_cpu-1211c to a higher version than -; Upgrade siemens simatic_s7_cpu_1212c to a higher version than -; Upgrade siemens simatic_s7_cpu_1214c to a higher version than -; Upgrade siemens simatic_s7_cpu_1215c to a higher version than -; Upgrade siemens simatic_s7_cpu_1217c to a higher version than -