PT-2014-6454 · Schneider Electric · Wonderware Information Server (Wis) Portal

Aleksey Osipov + 2 · Publicado 2014-08-28 · Atualizado 2025-11-01 · CVE-2014-5399

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5

Description The issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For versions 4.0 SP1 through 5.5, update to a version that contains a fix for this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-5399

Produtos afetados

Wonderware Information Server (Wis) Portal

Referências · 6

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5399 · Nota de Segurança
• https://t.me/cveNotify/141221 · Publicação no Telegram
• http://securityfocus.com/bid/69416 · Nota
• https://cisa.gov/news-events/ics-advisories/icsa-14-238-02 · Nota