Privilege Escalation Vulnerability in SIMATIC WinCC by Siemens
CVE-2014-4683

Currently unrated

Key Information:

Vendor
Siemens
Status
Wincc
Simatic Pcs7
Vendor
CVE Published:
24 July 2014

Summary

The WebNavigator server in Siemens SIMATIC WinCC versions prior to 7.3 is susceptible to a privilege escalation vulnerability. This issue allows remote authenticated users to elevate their access rights through crafted HTTP or HTTPS requests. This vulnerability can lead to unauthorized access and manipulation of the system, impacting its integrity and availability. Organizations using affected versions of SIMATIC WinCC should prioritize remediation to mitigate potential risks.

References

http://www.siemens.com/innovation/pool/de/forschungsfelde...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.