Siemens S7-200 CPU214 Controller: Unlocking Password-Protected Program Solutions

Question

Hello forum users

Colleagues, I bought a used Siemens S7-200 cpu214 controller ... from German ebay. Today I got the programming cable and I was surprised, the driver / program is password protected. Is there a way to crack this password, maybe there are some programs? I will be very grateful for your help.

linuz(_at_)op.pl
Regards, Linus

Marcin01 · Answer

Hello
I do not know the possibility of recovering the program from the controller in case you do not know the password. If you just want to remove some program that sits in memory and is password-protected, you should in microWin:
- select PLC >Clear
- select all three blocks and confirm by clicking ok.
If a password has been configured, micro/Win displays a password authorization dialog. To reset the password, enter CLEARPLC in the password authorization dialog (case insensitive).
This is how Siemens describes this operation in the manual for the S7-200.
Regards

edwaku · Answer

This topic has been covered many times on the forum. Of course, it is possible to read the password from the S7-200 controller. The password is stored in the EEPROM 24Cxx. The contents of the EEPROM can be read using the free PONY program. Please send me an e-mail - I will send the PONY program, the program for reading the password + instructions, + wiring diagram(s) for connecting to the EEPROM.

LeBmo · Answer

After reading the topic, I remembered that I had something like this somewhere... and I found it.
I've never used it and can't remember where I got it from, but maybe someone will find it useful.
I'm just asking if someone checks it to confirm usability.

kamelxlol · Answer

Hello I confirm, the program dropped by my friend LeBmo works.

misiek2012 · Answer

Could you tell me how you used this program?

jbryan189 · Answer

I'm all into trying this on my locked S7-200.
I am planning to just clip on the chip, and use the serial port and Pony to read the chip.
According to the data sheet, 3.3-5 vdc and is this correct? I've seen forums where the posters talk about 20 volts?

Do I need a decoupler on the power?

All help is appreciated

I assume pin 1 is the lower left one?

Sam_1976 · Answer

>>4805810Hi read password from eeprom, but now PLC not work, eeprom it is good, how recovery program.

jbryan189 · Answer

We’re going to need a much more detailed response. The easy questions: was the plc operational before surgery? I assume the chip is replaced in the original position? Let us know

Sam_1976 · Answer

Yes, the plc was operational.soldier in original position, now when I power the plc stop and diag.Is there a way to recover the program?

jbryan189 · Answer

I'm afraid that it's possibly dead. Can you put a generic unprogrammed EEPROM in it?

Siemens S7-200 CPU214 Controller: Unlocking Password-Protected Program Solutions

Post #1

Post #2

Post #3

Post #4

Post #5

Post #6

Post #7

Post #8

Post #9

Post #10

Post #11

Topic summary