Vulnerability Description
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Simatic Pcs7 | <= 8.0 |
| Siemens | Wincc | <= 7.2 |
Related Weaknesses (CWE)
References
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_adviVendor Advisory
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_adviVendor Advisory
FAQ
What is CVE-2014-4682?
CVE-2014-4682 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request.
How severe is CVE-2014-4682?
CVE-2014-4682 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-4682?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Pcs7, Siemens Wincc.