Improper input validation in Siemens Sinema_server

CVE-2014-2733

Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.026 (83.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2014-2733?
CVE-2014-2733 is a vulnerability in Siemens Sinema_server, classified under Improper Input Validation. Published 2014-04-19.
Is CVE-2014-2733 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.