AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-2909

MEDIUM · CVSS 5.8 EPSS 2.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-04-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-2909
Severity
MEDIUM
CVSS
5.8
EPSS
2.42%

Original NVD Description

CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.