CVE Feed

    Dashboard / CVE / CVE-2014-2731

    CVE-2014-2731

    Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.

    Published:Apr 19, 2014
    Last Modified:Apr 12, 2025
    EPS:Apr 19, 2014
    EPSS Score:0.02357
    CVSS Score:9.3

    Affected Products

    Vendor
    Siemens
    Product
    Sinema Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-35796 (CVSS 8.3) — A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly s…
    CVE-2022-25311 (CVSS 7.3) — A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1…
    CVE-2021-40438 (CVSS 9) — A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remot…
    CVE-2021-39275 (CVSS 9.8) — ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass u…
    CVE-2021-34798 (CVSS 7.5) — Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2…
    CVE-2019-10941 (CVSS 5.3) — A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for func…
    CVE-2021-3449 (CVSS 5.9) — An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.…
    CVE-2020-25237 (CVSS 8.1) — A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versio…
    CVE-2020-7580 (CVSS 6.7) — A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Softwar…
    CVE-2019-10940 (CVSS 9.9) — A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session va…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High