CVE-2024-47100

Summary

CVE-2024-47100: A cross-site request forgery (CSRF) vulnerability has been discovered in the web interface of various SIMATIC S7-1200 CPU models, including 1211C, 1212C, 1214C, 1215C, and several others. This issue allows unauthenticated attackers to manipulate the CPU mode by tricking authenticated users with sufficient permissions to click on malicious links. The affected devices are used in industrial automation systems and could result in significant damage if exploited. Users are urged to apply the available patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.