VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Nov 26, 2014· Updated May 6, 2026

CVE-2014-8552

CVE-2014-8552

Description

The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets.

Affected products

22
  • Siemens Foundation/Simatic Pcs76 versions
    cpe:2.3:a:siemens:simatic_pcs_7:7.1:sp1:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:siemens:simatic_pcs_7:7.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_pcs7:7.1:sp3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_pcs7:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_pcs7:7.1:sp4:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_pcs7:8.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_pcs7:8.0:sp2:*:*:*:*:*:*
  • Siemens Foundation/Simatic Tiaportal3 versions
    cpe:2.3:a:siemens:simatic_tiaportal:13.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:simatic_tiaportal:13.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_tiaportal:13.0:3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_tiaportal:13.0:5:*:*:*:*:*:*
  • Siemens Foundation/Simatic Wincc13 versions
    cpe:2.3:a:siemens:simatic_wincc:7.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:siemens:simatic_wincc:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.0:sp3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:4:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:5:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:6:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:7:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.2:8:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.3:1:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.