VULNERABILITY INTELLIGENCE
CVE-2014-4684
CVSS score6 MEDIUM
EPSS probability1.34%
CISA KEVNot currently listed
Published2014-07-24
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P
Description
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.
Primary references
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory