CVE-2017-6869
CriticalSummary
A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted network packets to port 443/TCP or port 80/TCP.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows remote code execution, potentially leading to system takeover.
Recommendation
It is recommended to update Siemens ViewPort to a version after revision number 1453 and to monitor network traffic on ports 443/TCP and 80/TCP for potential attack attempts.
Original NVD description (English source)
A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an unauthenticated remote user to upload arbitrary code and execute it with the permissions of the operating-system user running the web server by sending specially crafted network packets to port 443/TCP or port 80/TCP.