CVE-2014-4684

The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.

Score

CVSS 2.0 6.0 Medium

Status

Modified - cve@mitre.org

Published

2014-07-24

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Simatic Pcs7 (Siemens)
• Wincc (Siemens)

References

• http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-214365.pdf