Description
The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999.
Advisories 1
- ICSA-14-035-01 Siemens SIMATIC WinCC OA Multiple Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- 102810 vdb-entry
- simatic-wincc-cve20141697-code-exec(90933) vdb-entry
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf
- 56651 third-party-advisory
- 65351 vdb-entry
- http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01