CVEvulnerability
CVE-2014-2732
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or (2) 80.
Affected configurations
• siemens sinema server (<= 12.0)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-107-01 US Government Resource
- http://www.securityfocus.com/bid/66965 www.securityfocus.com
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-107-01 US Government Resource
- http://www.securityfocus.com/bid/66965 www.securityfocus.com
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf Vendor Advisory