Description
Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999.
Advisories 1
- ICSA-14-035-01 Siemens SIMATIC WinCC OA Multiple Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- simatic-wincc-cve20141698-dir-trav(90935) vdb-entry
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf
- 56651 third-party-advisory
- 65349 vdb-entry
- http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01
- 102811 vdb-entry