Unrated severityNVD Advisory· Published Aug 28, 2014· Updated Jun 17, 2026
CVE-2014-5399
CVE-2014-5399
Description
SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:portal:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:4.5:-:portal:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:5.0:-:portal:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:5.5:*:*:*:portal:*:*:*
- Range: >=4.0 SP1, <=5.5
- Schneider Electric/Wonderware Information Server Portalv5Range: 4.0 SP1
Patches
Vulnerability mechanics
References
4- ics-cert.us-cert.gov/advisories/ICSA-14-238-02nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/69416nvd
- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.jsonnvd
- www.cisa.gov/news-events/ics-advisories/icsa-14-238-02nvd
News mentions
0No linked articles in our index yet.