Unscored severity · published Apr 19, 2014
CVE-2014-2731
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port…
–
CVSS
4.2%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Sinema Server · Siemens
through 12.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2731
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2731
US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-14-107-01
Vendor Advisory
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf
More from Sinema Server
9.0
CVE-2021-40438
mod_proxy SSRF
9.9
CVE-2019-10940
A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1)
9.8
CVE-2021-39275
ap_escape_quotes() may write beyond the end of a buffer when given malicious input
9.0
CVE-2023-35796
A vulnerability has been identified in SINEMA Server V14 (All versions)
8.1
CVE-2020-25237
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2)