VAR-201404-0640
Vulnerability from variot - Updated: 2023-12-18 12:38Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or (2) 80. SINEMA Server is a Siemens industrial network management software that can quickly diagnose the communication status of industrial Ethernet, industrial switches SCALANCE, PROFINET and CP443-1, CP343-1, ET200 (PN) and other network devices. Siemens SINEMA server is prone to a directory-traversal vulnerability. Exploiting this issue can allow an attacker to gain access to arbitrary files. Information harvested may aid in launching further attacks. Versions prior to SINEMA server V12 SP1 are vulnerable
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201404-0640",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sinema server",
"scope": "lte",
"trust": 1.0,
"vendor": "siemens",
"version": "12.0"
},
{
"model": "sinema server",
"scope": "lt",
"trust": 0.8,
"vendor": "siemens",
"version": "12 sp1"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "sinema server",
"version": "*"
},
{
"model": "sinema server",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "12"
},
{
"model": "sinema server",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "12.0"
}
],
"sources": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:siemens:sinema_server:*:-:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "12.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2732"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Vendor reported this issue.",
"sources": [
{
"db": "BID",
"id": "66965"
}
],
"trust": 0.3
},
"cve": "CVE-2014-2732",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2014-2732",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-02365",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "7d762710-463f-11e9-946a-000c29342cb1",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "0f408816-2352-11e6-abef-000c29c66e3d",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-70671",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2014-2732",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNVD",
"id": "CNVD-2014-02365",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201404-394",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-70671",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2014-2732",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "VULHUB",
"id": "VHN-70671"
},
{
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or (2) 80. SINEMA Server is a Siemens industrial network management software that can quickly diagnose the communication status of industrial Ethernet, industrial switches SCALANCE, PROFINET and CP443-1, CP343-1, ET200 (PN) and other network devices. Siemens SINEMA server is prone to a directory-traversal vulnerability. \nExploiting this issue can allow an attacker to gain access to arbitrary files. Information harvested may aid in launching further attacks. \nVersions prior to SINEMA server V12 SP1 are vulnerable",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "BID",
"id": "66965"
},
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-70671"
},
{
"db": "VULMON",
"id": "CVE-2014-2732"
}
],
"trust": 3.15
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2014-2732",
"trust": 4.1
},
{
"db": "ICS CERT",
"id": "ICSA-14-107-01",
"trust": 2.6
},
{
"db": "SIEMENS",
"id": "SSA-364879",
"trust": 2.4
},
{
"db": "BID",
"id": "66965",
"trust": 1.5
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394",
"trust": 1.3
},
{
"db": "CNVD",
"id": "CNVD-2014-02365",
"trust": 1.2
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196",
"trust": 0.8
},
{
"db": "SECUNIA",
"id": "58068",
"trust": 0.6
},
{
"db": "IVD",
"id": "AFEA3B0B-9F05-4E28-9E5D-D007C4488BDA",
"trust": 0.2
},
{
"db": "IVD",
"id": "7D762710-463F-11E9-946A-000C29342CB1",
"trust": 0.2
},
{
"db": "IVD",
"id": "0F408816-2352-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-70671",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2014-2732",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "VULHUB",
"id": "VHN-70671"
},
{
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"db": "BID",
"id": "66965"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"id": "VAR-201404-0640",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "VULHUB",
"id": "VHN-70671"
}
],
"trust": 1.76071428
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.2
}
],
"sources": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
}
]
},
"last_update_date": "2023-12-18T12:38:16.782000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-364879",
"trust": 0.8,
"url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf"
},
{
"title": "Imens SINEMA Server has an unspecified path traversing the remote information disclosure vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/44895"
},
{
"title": "NetworkingTools",
"trust": 0.1,
"url": "https://github.com/virajmane/networkingtools "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/lisus18ikrak/testtttttttt "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-70671"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "NVD",
"id": "CVE-2014-2732"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.7,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-107-01"
},
{
"trust": 2.4,
"url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-364879.pdf"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/bid/66965"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2732"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2732"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/58068"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/22.html"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=34140"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "VULHUB",
"id": "VHN-70671"
},
{
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"db": "VULHUB",
"id": "VHN-70671"
},
{
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"db": "BID",
"id": "66965"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-18T00:00:00",
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"date": "2014-04-18T00:00:00",
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"date": "2014-04-18T00:00:00",
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"date": "2014-04-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"date": "2014-04-19T00:00:00",
"db": "VULHUB",
"id": "VHN-70671"
},
{
"date": "2014-04-19T00:00:00",
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"date": "2014-04-17T00:00:00",
"db": "BID",
"id": "66965"
},
{
"date": "2014-04-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"date": "2014-04-19T19:55:07.797000",
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"date": "2014-04-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-18T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02365"
},
{
"date": "2015-10-08T00:00:00",
"db": "VULHUB",
"id": "VHN-70671"
},
{
"date": "2015-10-08T00:00:00",
"db": "VULMON",
"id": "CVE-2014-2732"
},
{
"date": "2014-04-22T01:00:00",
"db": "BID",
"id": "66965"
},
{
"date": "2014-04-23T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002196"
},
{
"date": "2015-10-08T14:51:06.893000",
"db": "NVD",
"id": "CVE-2014-2732"
},
{
"date": "2014-04-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens SINEMA Server traversal vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002196"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Path traversal",
"sources": [
{
"db": "IVD",
"id": "afea3b0b-9f05-4e28-9e5d-d007c4488bda"
},
{
"db": "IVD",
"id": "7d762710-463f-11e9-946a-000c29342cb1"
},
{
"db": "IVD",
"id": "0f408816-2352-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-394"
}
],
"trust": 1.2
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…