What’s Vulnerable › Vulnerabilities

CVE-2017-14023

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-06 · updated 2026-06-17
• Weakness: CWE-20

Description

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.

Affected products

• Siemens Simatic Pcs7: 8.1, 8.2
• Siemens Simatic Wincc: 7.3-update13

References

• http://www.securityfocus.com/bid/101680
• http://www.securitytracker.com/id/1039729
• https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01
• http://www.securityfocus.com/bid/101680
• http://www.securitytracker.com/id/1039729
• https://ics-cert.us-cert.gov/advisories/ICSA-17-306-01

Get alerted when CVE-2017-14023 or the next vulnerability affects your stack