medium5.0
CVE-2014-8552
The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.…
Impact
The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Pcs 7 | Version 7.1 |
| Siemens | Simatic Pcs7 | Versions 7.1, 8.0, 8.1 |
| Siemens | Simatic Tiaportal | Version 13.0 |
| Siemens | Simatic Wincc | Versions 7.0, 7.2, 7.3 |