CVE-2014-2351

HOCH 7.5CVE-2014-2351 · Published 20/05/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-2351 ist eine Schwachstelle (HOCH (CVSS 7.5)) in csworks (controlsystemworks).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.4%, höher als bei 84.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
csworks controlsystemworks	`= 1.0.3540.0= 1.0.3560.0= 1.0.3580.0= 1.0.601.0= 1.0.612.0= 1.0.623.0= 1.0.720.0= 1.0.801.0= 1.0.813.0= 1.0.901.0= 1.1.3600.0= 1.1.3674.0= 1.1.3700.0= 1.2.3730.0= 1.2.3800.0= 1.4.3820.0= 1.4.3830.0= 1.4.3850.0= 1.4.3860.0= 1.4.3880.0= 1.4.3900.0= 1.4.4000.0= 1.7.4050.0= 1.7.5000.0= 2.0.4115.0= 2.0.4115.1= 2.1.4386.0= 2.1.4560.0= 2.5.4770.0= 2.5.4770.1= 2.5.4912.0≤ 2.5.5050.0`	No fix yet

Description

SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.

References

controlsystemworks.com/blogengine/post/2014/05/08/Important-CSWorks-security-release-2552330 · Vendor Advisory
securityfocus.com/bid/67427
cisa.gov/news-events/ics-advisories/icsa-14-135-01
ics-cert.us-cert.gov/advisories/ICSA-14-135-01 · US Government Resource

Weitere Schwachstellen in csworks

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free