CVE-2016-7165

Severity Score

6.4

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 V5.X (All versions < V5.5 SP4 HF11), SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced (All versions < V14), SIMATIC WinCC (TIA Portal) Professional V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) Professional V14 (All versions < V14 SP1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1), SIMATIC WinCC V7.0 SP2 and earlier versions (All versions < V7.0 SP2 Upd 12), SIMATIC WinCC V7.0 SP3 (All versions < V7.0 SP3 Upd 8), SIMATIC WinCC V7.2 (All versions < V7.2 Upd 14), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 11), SIMATIC WinCC V7.4 (All versions < V7.4 SP1), SIMIT V9.0 (All versions < V9.0 SP1), SINEMA Remote Connect Client (All versions < V1.0 SP3), SINEMA Server (All versions < V13 SP2), SOFTNET Security Client V5.0 (All versions), Security Configuration Tool (SCT) (All versions < V4.3 HF1), TeleControl Server Basic (All versions < V3.0 SP2), WinAC RTX 2010 SP2 (All versions), WinAC RTX F 2010 SP2 (All versions). Unquoted service paths could allow local Microsoft Windows operating system users to escalate their privileges if the affected products are not installed under their default path ("C:\Program Files\*" or the localized equivalent).

Se ha identificado una vulnerabilidad en Primary Setup Tool (PST) (todas las versiones anteriores a V4.2 HF1), SIMATIC IT Production Suite (todas las versiones anteriores a V7.0 SP1 HFX 2), SIMATIC NET PC-Software (Todas las versiones anteriores a V14), SIMATIC PCS 7 versión V7.1 (Todas las versiones), SIMATIC PCS 7 versión V8.0 (Todas las versiones), SIMATIC PCS 7 versión V8.1 (Todas las versiones),SIMATIC PCS 7 versión V8.2 (Todas las versiones anteriores a V8.2 SP1), SIMATIC STEP 7 (TIA Portal) versión V13 (Todas las versiones anteriores a V13 SP2), SIMATIC STEP 7 versiones V5.X (Todas las versiones anteriores a V5.5 SP4 HF11), SIMATIC WinCC (TIA Portal) Basic, Comfort, Advanced (Todas las versiones anteriores a V14), SIMATIC WinCC (TIA Portal) Professional versión V13 (Todas las versiones anteriores a V13 SP2), SIMATIC WinCC (TIA Portal) Professional versión V14 (Todas las versiones anteriores a V14 SP1), SIMATIC WinCC Runtime Professional versión V13 (Todas las versiones anteriores a V13 SP2), SIMATIC WinCC Runtime Professional versión V14 (Todas las versiones anteriores a V14 SP1), SIMATIC WinCC versión V7.0 SP2 y anteriores (Todas las versiones anteriores a V7.0 SP2 Upd 12), SIMATIC WinCC versión V7.0 SP3 (Todas las versiones anteriores a V7.0 SP3 Upd 8), SIMATIC WinCC versión V7.2 (Todas las versiones anteriores a V7.2 Upd 14), SIMATIC WinCC versión V7.3 (Todas las versiones anteriores a V7.3 Upd 11), SIMATIC WinCC versión V7.4 (Todas las versiones anteriores a V7.4 SP1), SIMIT versión V9.0 (Todas las versiones anteriores a V9.0 SP1), SINEMA Remote Connect Client (Todas las versiones anteriores a V1.0 SP3), SINEMA Server (Todas las versiones anteriores a V13 SP2), SOFTNET Security Client versión V5.0 (Todas las versiones), Security Configuration Tool (SCT) (Todas las versiones anteriores a V4.3 HF1), TeleControl Server Basic (Todas las versiones anteriores a V3.0 SP2), WinAC RTX 2010 SP2 (Todas las versiones), WinAC RTX F 2010 SP2 (Todas las versiones). Las rutas (path) de servicio sin comillas podrían permitir que los usuarios locales del sistema operativo Microsoft Windows aumenten sus privilegios si los productos afectados no están instalados en su ruta (path) de acceso predeterminada ("C:\Program Files\*" o el equivalente localizado).

*Credits: N/A

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-09-08 CVE Reserved
2016-11-15 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-254: 7PK - Security Features
CWE-284: Improper Access Control

CAPEC

References (4)

URL	Tag	Source
http://securityaffairs.co/wordpress/53266/security/cve-2016-7165-siemens.html	Third Party Advisory
http://www.securityfocus.com/bid/94158	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-701708.pdf	X_refsource_confirm
https://ics-cert.us-cert.gov/advisories/ICSA-16-313-02	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"		Primary Setup Tool Search vendor "Siemens" for product "Primary Setup Tool"				-		-		Affected
Siemens Search vendor "Siemens"		Security Configuration Tool Search vendor "Siemens" for product "Security Configuration Tool"				-		-		Affected
Siemens Search vendor "Siemens"		Simatic It Production Suite Search vendor "Siemens" for product "Simatic It Production Suite"				-		-		Affected
Siemens Search vendor "Siemens"		Simatic Net Pc Software Search vendor "Siemens" for product "Simatic Net Pc Software"				<= 14.0 Search vendor "Siemens" for product "Simatic Net Pc Software" and version " <= 14.0"		-		Affected
Siemens Search vendor "Siemens"		Simatic Pcs 7 Search vendor "Siemens" for product "Simatic Pcs 7"				<= 7.1 Search vendor "Siemens" for product "Simatic Pcs 7" and version " <= 7.1"		-		Affected
Siemens Search vendor "Siemens"		Simatic Pcs7 Search vendor "Siemens" for product "Simatic Pcs7"				8.0 Search vendor "Siemens" for product "Simatic Pcs7" and version "8.0"		-		Affected
Siemens Search vendor "Siemens"		Simatic Pcs7 Search vendor "Siemens" for product "Simatic Pcs7"				8.1 Search vendor "Siemens" for product "Simatic Pcs7" and version "8.1"		-		Affected
Siemens Search vendor "Siemens"		Simatic Pcs7 Search vendor "Siemens" for product "Simatic Pcs7"				8.2 Search vendor "Siemens" for product "Simatic Pcs7" and version "8.2"		-		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				<= 5.5 Search vendor "Siemens" for product "Simatic Step 7" and version " <= 5.5"		sp4		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 \(tia Portal\) Search vendor "Siemens" for product "Simatic Step 7 \(tia Portal\)"				<= 14.0 Search vendor "Siemens" for product "Simatic Step 7 \(tia Portal\)" and version " <= 14.0"		-		Affected
Siemens Search vendor "Siemens"		Simatic Winac Rtx 2010 Search vendor "Siemens" for product "Simatic Winac Rtx 2010"				-		-		Affected
Siemens Search vendor "Siemens"		Simatic Winac Rtx F 2010 Search vendor "Siemens" for product "Simatic Winac Rtx F 2010"				-		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				<= 7.0 Search vendor "Siemens" for product "Simatic Wincc" and version " <= 7.0"		sp2		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.0 Search vendor "Siemens" for product "Simatic Wincc" and version "7.0"		sp3		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.2 Search vendor "Siemens" for product "Simatic Wincc" and version "7.2"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.3 Search vendor "Siemens" for product "Simatic Wincc" and version "7.3"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc \(tia Portal\) Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)"				<= 14.0 Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)" and version " <= 14.0"		advanced		Affected
Siemens Search vendor "Siemens"		Simatic Wincc \(tia Portal\) Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)"				<= 14.0 Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)" and version " <= 14.0"		basic		Affected
Siemens Search vendor "Siemens"		Simatic Wincc \(tia Portal\) Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)"				<= 14.0 Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)" and version " <= 14.0"		comfort		Affected
Siemens Search vendor "Siemens"		Simatic Wincc \(tia Portal\) Search vendor "Siemens" for product "Simatic Wincc \(tia Portal\)"				-		professional		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Runtime Search vendor "Siemens" for product "Simatic Wincc Runtime"				-		professional		Affected
Siemens Search vendor "Siemens"		Simit Search vendor "Siemens" for product "Simit"				9.0 Search vendor "Siemens" for product "Simit" and version "9.0"		-		Affected
Siemens Search vendor "Siemens"		Sinema Remote Connect Search vendor "Siemens" for product "Sinema Remote Connect"				-		-		Affected
Siemens Search vendor "Siemens"		Sinema Server Search vendor "Siemens" for product "Sinema Server"				<= 13.0 Search vendor "Siemens" for product "Sinema Server" and version " <= 13.0"		sp2		Affected
Siemens Search vendor "Siemens"		Softnet Security Client Search vendor "Siemens" for product "Softnet Security Client"				<= 5.0 Search vendor "Siemens" for product "Softnet Security Client" and version " <= 5.0"		-		Affected
Siemens Search vendor "Siemens"		Telecontrol Basic Search vendor "Siemens" for product "Telecontrol Basic"				<= 3.0 Search vendor "Siemens" for product "Telecontrol Basic" and version " <= 3.0"		sp2		Affected