https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:01:38.531161+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02217 bdu:2025-02217 2026-10-03T03:01:38.631918+00:00 bdu:2025-02217 https://cve.radiocsirt.org/vuln/euvd-2026-241209 EUVD-2026-241209 2026-10-03T03:01:38.631953+00:00 EUVD-2026-241209 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3037 fkie_cve-2012-3037 2026-10-03T03:01:38.631968+00:00

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

 https://cve.radiocsirt.org/vuln/ghsa-cq39-26j4-6jcj GHSA-cq39-26j4-6jcj 2026-10-03T03:01:38.631996+00:00

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

 https://cve.radiocsirt.org/vuln/gsd-2012-3037 gsd-2012-3037 2026-10-03T03:01:38.632013+00:00 gsd-2012-3037 https://cve.radiocsirt.org/vuln/icsa-12-263-01 ICSA-12-263-01 — Siemens S7-1200 Insecure Storage of HTTPS CA Certificate 2026-10-03T03:01:38.632025+00:00

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate.

 https://cve.radiocsirt.org/vuln/ssa-240718 SSA-240718 — SSA-240718: Insecure Storage of HTTPS CA Certificate in SIMATIC S7-1200 CPU V2 2026-10-03T03:01:38.632043+00:00

Affected devices do not properly protect the private key of the integrated Certification Authority (CA) certificate. Possession of this key could allow remote attackers to spoof the device's web server by creating a forged web server certificate.