Vulnerability in Siemens Simatic_pcs7

CVE-2014-4684

The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.

EPSS: 0.004 (58.9th percentile) — read the EPSS interpretation.

Affected products

Siemens Simatic_pcs7 — versions 7.1, 8.0
Siemens Wincc — versions 5.0, 6.0, 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)