« Volver al listado

CVE-2014-8551

Estado: ModificadaAlta (10)—

The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Siemens — Simatic Pcs7Siemens — Simatic PCS 7Siemens — Simatic TiaportalSiemens — Simatic Wincc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-8551",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-26T11:59:00.093",
  "references": [
    {
      "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-134508.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets."
    },
    {
      "lang": "es",
      "value": "El servidor WinCC en Siemens SIMATIC WinCC 7.0 hasta SP3, 7.2 anterior a la actualización 9, y 7.3 anterior a la actualización 2; SIMATIC PCS 7 7.1 hasta SP4, 8.0 hasta SP2, y 8.1; y TIA Portal 13 anterior a la actualización 6 permite a atacantes remotos ejecutar código arbitrario a través de paquetes manipulados."
    }
  ],
  "lastModified": "2026-06-17T00:16:55.313",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs_7:7.1:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE258BF2-AD82-401C-B020-08A22A549A25"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs7:7.1:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33FA164B-E269-4140-AC85-2623356AF636"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs7:7.1:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D62C7959-87D9-42EC-A224-2EE6EF23C1CF"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs7:8.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "428F68D2-8C1D-4ADE-A6FB-65EC4C426F99"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs7:8.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14193511-1B9B-4319-92AE-BB26F398550C"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs7:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "172A6A81-C32E-4ACC-AB8C-2014BF3A6901"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_tiaportal:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19C3A00B-A47E-4723-B652-B64FDC5F2601"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_tiaportal:13.0:3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "144DE778-4439-489F-830D-B4742BB11FEB"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_tiaportal:13.0:5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39B75B5E-7979-4E3B-BE94-AE04F17A6F3C"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CF84FC5-9450-47B7-A4F0-99361C528C00"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8274939-833E-40E1-8D2E-1B28CEA91036"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.0:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61F46206-F232-4F62-AF4F-E2DCF462AE60"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.0:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D0BB2E6-1444-499A-943E-8D19C402F1BD"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D6E154F-F8A0-4E9D-BC37-E95B1820D2BF"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6745F96-FA72-457B-AD14-07C4B353310F"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E555D458-59C4-4CBC-95F4-CBA503BCCB24"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BEE67FC-D188-4B0C-A837-FC91B406982E"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75121F46-303D-4416-8FBD-1938BDD60AAB"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF8B251F-399E-4165-B3A6-801775212C5D"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBE45DD1-630F-448F-90FE-D3CC00266EF1"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.2:8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFC7DC1F-B4C5-4116-9B53-706F2B3227DD"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_wincc:7.3:1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8F27E75-90CD-4C3B-AF0E-90EF338A2D91"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}