CVE-2017-14023: Input Validation
An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14023?
The severity of CVE-2017-14023 is medium with a severity value of 4.9.
What is the affected software for CVE-2017-14023?
The affected software for CVE-2017-14023 includes Siemens SIMATIC PCS 7 V8.1, Siemens Simatic WinCC V7.3 with Update 13, and Siemens SIMATIC PCS 7 V8.2.
How can an authenticated remote attacker exploit CVE-2017-14023?
An authenticated remote attacker who is a member of the administrators group can exploit CVE-2017-14023.
Are there any available references for CVE-2017-14023?
Yes, the following references are available: http://www.securityfocus.com/bid/101680, http://www.securitytracker.com/id/1039729, and https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01.
What is the Common Weakness Enumeration (CWE) of CVE-2017-14023?
The Common Weakness Enumeration (CWE) of CVE-2017-14023 is CWE-20.