109 matches found
CVE-2014-2731
CVE-2014-2731 affects Siemens SINEMA Server prior to 12 SP1, where the integrated web server could allow unauthenticated remote code execution via HTTP requests to ports 4999 or 80. The vulnerability is described as multiple unspecified issues including Code Injection (CWE-94) and Relative Path T...
CVE-2014-2733
Siemens SINEMA Server prior to 12 SP1 is affected by a vulnerability where specially crafted HTTP requests to ports 4999 or 80 can cause a denial of service of the web interface. The issue is associated with improper input handling on the integrated web servers. Siemens has provided a fix in SINE...
CVE-2014-2733
Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...
CVE-2014-2732
Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...
CVE-2014-2732
Siemens SINEMA Server (all versions prior to 12 SP1) contains directory traversal and related input-validation weaknesses in its integrated web server accessible via ports 4999 and 80. The issues allow remote attackers to access arbitrary files on the server, due to traversal and code-execution r...
Siemens SINEMA Server未明远程代码执行漏洞
CVE ID:CVE-2014-2731 SINEMA Server是西门子工业网络管理软件能够快速诊断工业以太网、工业交换机SCALANCE、PROFINET和CP443-1、CP343-1、ET200PN等网络设备的通讯状态。 SINEMA Server存在未明安全漏洞，允许远程攻击者利用漏洞执行任意代码。 0 SINEMA Server 12 SINEMA Server 12 SP1版本已修复该漏洞，建议用户下载使用： http://www.siemens.com/...
Siemens SINEMA Server特制HTTP请求处理远程拒绝服务漏洞
CVE ID:CVE-2014-2733 SINEMA Server是西门子工业网络管理软件能够快速诊断工业以太网、工业交换机SCALANCE、PROFINET和CP443-1、CP343-1、ET200PN等网络设备的通讯状态。 SINEMA Server处理特制HTTP请求存在安全漏洞，允许远程攻击者利用漏洞提交特制的请求使WEB接口崩溃。 0 SINEMA Server 12 SINEMA Server 12 SP1版本已修复该漏洞，建议用户下载使用： http://www.siemens.com/...
Siemens SINEMA Server未明路径遍历远程信息泄漏漏洞
CVE ID:CVE-2014-2732 SINEMA Server是西门子工业网络管理软件能够快速诊断工业以太网、工业交换机SCALANCE、PROFINET和CP443-1、CP343-1、ET200PN等网络设备的通讯状态。 SINEMA Server存在目录遍历漏洞，允许远程攻击者利用漏洞提交特殊的目录遍历序列如'../'来绕过WEB限制，获取敏感信息。 0 SINEMA Server 12 SINEMA Server 12 SP1版本已修复该漏洞，建议用户下载使用： http://www.siemens.com/...
