Vulnetix
Try Vulnetix Request Demo
CVE-2017-14023 PUBLISHED CVSS 4 MEDIUM

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.

EPSS 2.77% · 85.9th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
2.77%
85.9th percentile

Affected Products

VendorProductVersions
siemenssimatic_wincc7.3
n/aSiemens SIMATIC PCS 7Siemens SIMATIC PCS 7
siemenssimatic_pcs78.1, 8.2

Timeline

References

Open in Interactive Console →