CVE-2014-2731

High

Published: 19/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before version 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to ports 4999 or 80.

Risk Assessment

Attackers may remotely take control of the system, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update Siemens SINEMA Server to version 12 SP1 or later and to monitor HTTP traffic on the specified ports.

Other vulnerabilities in Siemens SINEMA Server

CVE-2016-6486High
Siemens SINEMA Server uses weak permissions for the application folder, allowing local users to gain privileges via unspecified vectors.

Original NVD description (English source)

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.