Denial of Service Vulnerability in Siemens SIMATIC WinCC OA

CVE-2014-1699

Summary

A vulnerability exists in Siemens SIMATIC WinCC OA versions prior to 3.12 P002, where remote attackers can exploit this flaw to trigger a denial of service condition. This is achieved by sending specially crafted HTTP requests to port 4999, resulting in the monitoring service becoming unavailable. Organizations using affected versions are advised to assess their exposure and apply the necessary updates to mitigate potential disruptions.

References