CVE-2014-5399CWE-89

Schneider Electric Wonderware SQL Injection

High · published August 28, 2014

CVSS v2.0
7.5
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

The record
Technical detail
CVSS v2.0
7.5 · HIGH
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.01587 · 75.4th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2014-08-28T01:00Z
EPSS history
Timeline
  • 28 AUG 01:00Z
    Schneider Electric Wonderware SQL Injection
    cvelistv5