Description
Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999.
Advisories 1
- ICSA-14-035-01 Siemens SIMATIC WinCC OA Multiple Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025
References
- 102812 vdb-entry
- simatic-wincc-cve20141699-dos(90936) vdb-entry
- 65347 vdb-entry
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-342587.pdf
- 56651 third-party-advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-035-01