{ "schema_version": "1.4.0", "id": "GHSA-r54v-r859-38g3", "modified": "2022-05-13T01:28:34Z", "published": "2022-05-13T01:28:34Z", "aliases": [ "CVE-2014-2247" ], "details": "The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2247" }, { "type": "WEB", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf" }, { "type": "WEB", "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-073-01" }, { "type": "WEB", "url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-03-16T14:06:00Z" } }