NetSight
medium6.0

CVE-2014-4684

The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request…

Impact

The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.

Affected products

VendorProductAffected versions
SiemensSimatic Pcs7
through 8.0
Versions 7.1, 8.0
SiemensWincc
through 7.2
Versions 5.0, 6.0, 7.0, 7.1

Weakness classification

References