CVE-2014-9369 describes a denial-of-service vulnerability affecting Siemens SPC4000, SPC5000, and SPC6000 controllers running firmware versions prior to 3.6.0. This critical vulnerability allows unauthenticated remote attackers to trigger a device restart by sending specially crafted network packets. While no public exploit code or active exploitation has been observed, the high CVSS score of 7.8 and the ease of exploitation (network attack, low complexity) indicate a significant risk if exploited. Community discussion and media coverage are minimal, suggesting limited public awareness despite the potential for disruption in affected industrial control systems.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.5.9CPE matchmatch criteria | cpe:2.3:o:siemens:spc5000_firmware:*:*:*:*:*:*:*:* | ||
<= 3.5.9CPE matchmatch criteria | cpe:2.3:o:siemens:spc4000_firmware:*:*:*:*:*:*:*:* | ||
<= 3.5.9CPE matchmatch criteria | cpe:2.3:o:siemens:spc6000_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.