Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a “user program block” protection mechanism via unspecified vectors.