Vulnerability Details CVE-2014-4683
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.6%
CVSS Severity
CVSS v2 Score 4.9
References
Products affected by CVE-2014-4683
-
cpe:2.3:a:siemens:simatic_pcs7:7.1
-
cpe:2.3:a:siemens:simatic_pcs7:8.0
-
cpe:2.3:a:siemens:wincc:5.0
-
cpe:2.3:a:siemens:wincc:6.0
-
cpe:2.3:a:siemens:wincc:7.0
-
cpe:2.3:a:siemens:wincc:7.1
-
cpe:2.3:a:siemens:wincc:7.2