Siemens SINEMA Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-2733US | medium5.0 | — | ||
Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80. | ||||
| CVE-2014-2732US | medium5.0 | — | ||
Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic t… | ||||
| CVE-2014-2731US | high9.3 | — | ||
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-107-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-107-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationSINEMA Server
Siemens has provided a software update (V12 SP1) for SINEMA server that fixes these vulnerabilities. Users of these systems may find it at the following location at Siemens web site: (http://support.automation.siemens.com/WW/view/de/74758725)
http://support.automation.siemens.com/WW/view/de/74758725 - MitigationSINEMA Server
Siemens has provided a software update (V12 SP1) for SINEMA server that fixes these vulnerabilities. Users of these systems may find it at the following location at Siemens web site: (http://support.automation.siemens.com/WW/view/de/74758725)
http://support.automation.siemens.com/WW/view/de/74758725 - MitigationSINEMA Server
Siemens has provided a software update (V12 SP1) for SINEMA server that fixes these vulnerabilities. Users of these systems may find it at the following location at Siemens web site: (http://support.automation.siemens.com/WW/view/de/74758725)
http://support.automation.siemens.com/WW/view/de/74758725
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan