Unrated severityNVD Advisory· Published Aug 28, 2014· Updated May 6, 2026
CVE-2014-5399
CVE-2014-5399
Description
SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
6cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:portal:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:4.5:-:portal:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:5.0:-:portal:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:5.5:*:*:*:portal:*:*:*
- Schneider Electric/Wonderware Information Server Portalv5Range: 4.0 SP1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- ics-cert.us-cert.gov/advisories/ICSA-14-238-02nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/69416nvd
- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.jsonnvd
- www.cisa.gov/news-events/ics-advisories/icsa-14-238-02nvd
News mentions
0No linked articles in our index yet.