Remote Code Execution Vulnerability in Siemens SIMATIC WinCC and PCS 7
CVE-2014-8551

Currently unrated

Key Information:

Vendor
Siemens
Status
Simatic Tiaportal
Simatic Wincc
Simatic Pcs7
Simatic Pcs 7
Vendor
CVE Published:
26 November 2014

Summary

The WinCC server in certain versions of Siemens SIMATIC WinCC and PCS 7 has a security vulnerability that permits remote attackers to execute arbitrary code. This vulnerability is exploited via specially crafted packets, allowing unauthorized access. It is crucial for users to ensure their systems are updated to secure versions to mitigate any risk of attack.

References

http://www.siemens.com/innovation/pool/de/forschungsfelde...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.