CVE-2014-1697

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC OA versions prior to 3.12 P002 January

Description The issue is related to the integrated web server in Siemens SIMATIC WinCC OA, which allows remote attackers to execute arbitrary code via crafted packets sent to TCP port 4999. This is due to errors that occur when processing specially formed TCP packets, enabling an attacker to exploit the issue and execute arbitrary code by sending crafted packets to the specified port.

Recommendations For versions prior to 3.12 P002 January, update to version 3.12 P002 January or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 4999 to minimize the risk of exploitation.