CVE-2014-2909

CVE-2014-2909 describes a CRLF injection vulnerability in the integrated web server of Siemens SIMATIC S7-1200 CPU family (versions 2.x and 3.x) that could enable HTTP header injection. The issue is categorized as an HTTP response splitting risk with a CVSS v2 base score of 5.8 (network access, m...