Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka the ISO-TSAP port).
https://github.com/Mewtwoz/n-days-poc-benchmark-and-dataset
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0711
https://cert-portal.siemens.com/productcert/pdf/ssa-724606.pdf