Path Traversal in Siemens Simatic_wincc_open_architecture
CVE-2014-1698
Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
- Siemens Simatic_wincc_open_architecture
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (US Government Resource, x_refsource_MISC)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)