← Back

CVE-2014-4682

nvd nist
Published: Jul 24, 2014Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request.

Affected (16)

Siemens
2 products
Simatic Pcs7
Wincc
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Simatic Pcs7
Up to 8.0
Simatic Pcs7
Version 7.1 sp3
Simatic Pcs7
Version 8.0
Siemens
Wincc
Up to 7.2
Wincc
Version 5.0
Wincc
Version 5.0 sp1
Wincc
Version 6.0
Wincc
Version 6.0 sp2
Wincc
Version 6.0 sp3
Wincc
Version 6.0 sp4
Wincc
Version 7.0
Wincc
Version 7.0 sp1
Wincc
Version 7.0 sp2
Wincc
Version 7.0 sp3
Wincc
Version 7.1
Wincc
Version 7.1 sp1

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.