CVE-2014-5399

Publication date

2014-08-28 01:00:00

Family

icscert

State

PUBLISHED

Description

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.