Sign-up

ID

VAR-201503-0009


CVE

CVE-2014-9369


TITLE

Multiple products Siemens SPC Service disruption in the controller (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-007960

DESCRIPTION

Siemens SPC controllers SPC4000, SPC5000, and SPC6000 before 3.6.0 allow remote attackers to cause a denial of service (device restart) via crafted packets. The Siemens SPC controller is a controller device from Siemens

Trust: 2.7

sources: NVD: CVE-2014-9369 // JVNDB: JVNDB-2014-007960 // CNVD: CNVD-2015-01693 // BID: 72976 // IVD: 9e64a316-2351-11e6-abef-000c29c66e3d // VULHUB: VHN-77314

IOT TAXONOMY

category:['ICS', 'Network device']sub_category: -

Trust: 0.6

category:['ICS']sub_category: -

Trust: 0.2

sources: IVD: 9e64a316-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2015-01693

AFFECTED PRODUCTS

vendor:siemensmodel:spc4000scope:lteversion:3.5.9

Trust: 1.0

vendor:siemensmodel:spc6000scope:lteversion:3.5.9

Trust: 1.0

vendor:siemensmodel:spc5000scope:lteversion:3.5.9

Trust: 1.0

vendor:siemensmodel:spc4000scope: - version: -

Trust: 0.8

vendor:siemensmodel:spc4000scope:lteversion:3.6.0

Trust: 0.8

vendor:siemensmodel:spc5000scope: - version: -

Trust: 0.8

vendor:siemensmodel:spc5000scope:lteversion:3.6.0

Trust: 0.8

vendor:siemensmodel:spc6000scope: - version: -

Trust: 0.8

vendor:siemensmodel:spc6000scope:lteversion:3.6.0

Trust: 0.8

vendor:siemensmodel:spc4000/spc5000/spc6000scope:ltversion:3.6.0

Trust: 0.6

vendor:siemensmodel:spc4000scope:eqversion:3.5.9

Trust: 0.6

vendor:siemensmodel:spc5000scope:eqversion:3.5.9

Trust: 0.6

vendor:siemensmodel:spc6000scope:eqversion:3.5.9

Trust: 0.6

vendor:siemensmodel:spc6000scope:eqversion:0

Trust: 0.3

vendor:siemensmodel:spc5000scope:eqversion:0

Trust: 0.3

vendor:siemensmodel:spc4000scope:eqversion:0

Trust: 0.3

vendor:siemensmodel:spc6000scope:neversion:3.6

Trust: 0.3

vendor:siemensmodel:spc5000scope:neversion:3.6

Trust: 0.3

vendor:siemensmodel:spc4000scope:neversion:3.6

Trust: 0.3

vendor:spc5000model: - scope:eqversion:*

Trust: 0.2

vendor:spc4000model: - scope:eqversion:*

Trust: 0.2

vendor:spc6000model: - scope:eqversion:*

Trust: 0.2

sources: IVD: 9e64a316-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2015-01693 // BID: 72976 // JVNDB: JVNDB-2014-007960 // CNNVD: CNNVD-201503-125 // NVD: CVE-2014-9369

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-9369
value: HIGH

Trust: 1.0

NVD: CVE-2014-9369
value: HIGH

Trust: 0.8

CNVD: CNVD-2015-01693
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201503-125
value: HIGH

Trust: 0.6

IVD: 9e64a316-2351-11e6-abef-000c29c66e3d
value: HIGH

Trust: 0.2

VULHUB: VHN-77314
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2014-9369
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2015-01693
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: 9e64a316-2351-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-77314
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: IVD: 9e64a316-2351-11e6-abef-000c29c66e3d // CNVD: CNVD-2015-01693 // VULHUB: VHN-77314 // JVNDB: JVNDB-2014-007960 // CNNVD: CNNVD-201503-125 // NVD: CVE-2014-9369

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-77314 // JVNDB: JVNDB-2014-007960 // NVD: CVE-2014-9369

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201503-125

TYPE

Input validation

Trust: 0.8

sources: IVD: 9e64a316-2351-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201503-125

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-007960

PATCH
title:SSA-335471url:http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-335471.pdf
Trust: 0.8
title:Patch for multiple Siemens SPC Controller Product Denial of Service Vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/56317
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2015-01693 // 
            
            
            
            JVNDB: JVNDB-2014-007960

EXTERNAL IDS
db:NVDid:CVE-2014-9369
Trust: 3.6
db:SIEMENSid:SSA-335471
Trust: 2.6
db:BIDid:72976
Trust: 1.0
db:CNNVDid:CNNVD-201503-125
Trust: 0.9
db:CNVDid:CNVD-2015-01693
Trust: 0.8
db:JVNDBid:JVNDB-2014-007960
Trust: 0.8
db:ICS CERTid:ICSA-15-064-03
Trust: 0.3
db:IVDid:9E64A316-2351-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:VULHUBid:VHN-77314
Trust: 0.1
sources:
            
            
            IVD: 9e64a316-2351-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2015-01693 // 
            
            
            
            VULHUB: VHN-77314 // 
            
            
            
            BID: 72976 // 
            
            
            
            JVNDB: JVNDB-2014-007960 // 
            
            
            
            CNNVD: CNNVD-201503-125 // 
            
            
            
            NVD: CVE-2014-9369

REFERENCES
url:http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-335471.pdf
Trust: 2.6
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-9369
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-9369
Trust: 0.8
url:http://www.siemens.com/
Trust: 0.3
url:https://ics-cert.us-cert.gov/advisories/icsa-15-064-03
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2015-01693 // 
            
            
            
            VULHUB: VHN-77314 // 
            
            
            
            BID: 72976 // 
            
            
            
            JVNDB: JVNDB-2014-007960 // 
            
            
            
            CNNVD: CNNVD-201503-125 // 
            
            
            
            NVD: CVE-2014-9369

CREDITS
Davide Peruzzi (Peru) from GoSecure!
Trust: 0.3
sources:
            
            
            BID: 72976

SOURCES
db:IVDid:9e64a316-2351-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2015-01693
db:VULHUBid:VHN-77314
db:BIDid:72976
db:JVNDBid:JVNDB-2014-007960
db:CNNVDid:CNNVD-201503-125
db:NVDid:CVE-2014-9369

LAST UPDATE DATE
2025-04-12T23:09:10.308000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2015-01693date:2015-03-17T00:00:00
db:VULHUBid:VHN-77314date:2015-03-09T00:00:00
db:BIDid:72976date:2015-03-05T00:00:00
db:JVNDBid:JVNDB-2014-007960date:2015-03-11T00:00:00
db:CNNVDid:CNNVD-201503-125date:2015-03-11T00:00:00
db:NVDid:CVE-2014-9369date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:IVDid:9e64a316-2351-11e6-abef-000c29c66e3ddate:2015-03-17T00:00:00
db:CNVDid:CNVD-2015-01693date:2015-03-17T00:00:00
db:VULHUBid:VHN-77314date:2015-03-07T00:00:00
db:BIDid:72976date:2015-03-05T00:00:00
db:JVNDBid:JVNDB-2014-007960date:2015-03-11T00:00:00
db:CNNVDid:CNNVD-201503-125date:2015-03-09T00:00:00
db:NVDid:CVE-2014-9369date:2015-03-07T02:59:00.067