CVE-2016-9158

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions). Specially crafted packets sent to port 80/tcp could cause the affected devices to go into defect mode. A cold restart is required to recover the system.

Se ha identificado una vulnerabilidad en la familia de CPU SIMATIC S7-300 (todas las versiones), la familia de CPU SIMATIC S7-300 (incluidas las CPU ET200 relacionadas y las variantes SIPLUS) (todas las versiones), SIMATIC S7-400 PN / DP V6 y familias de CPU inferiores (incl. variantes SIPLUS) (todas las versiones), familia de CPU SIMATIC S7-400 PN / DP V7 (incl. variantes SIPLUS) (todas las versiones), SIMATIC S7-400 V6 y familia de CPU anterior (todas las versiones), SIMATIC S7-400 Familia de CPU V7 (todas las versiones). Los paquetes especialmente diseñados enviados al puerto 80 / tcp podrían hacer que los dispositivos afectados entren en modo defectuoso. Se requiere un reinicio en frío para recuperar el sistema.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-11-03 CVE Reserved
2016-12-17 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (5)

URL	Tag	Source
http://www.securityfocus.com/bid/94820	Vdb Entry
http://www.securitytracker.com/id/1037434	Vdb Entry
https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf	X_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05	X_refsource_misc
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 312 Search vendor "Siemens" for product "Simatic S7-300 Cpu 312"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 314 Search vendor "Siemens" for product "Simatic S7-300 Cpu 314"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 315-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 315-2 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 317- 2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317- 2 Dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 317-2 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-300 Cpu 319-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 319-3 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 412-1 Search vendor "Siemens" for product "Simatic S7-400 Cpu 412-1"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 412-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 412-2"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 412-2 Pn Search vendor "Siemens" for product "Simatic S7-400 Cpu 412-2 Pn"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 414-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 414-2"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 414-3 Search vendor "Siemens" for product "Simatic S7-400 Cpu 414-3"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 414-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-400 Cpu 414-3 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 416-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416-2"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 416-3 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416-3"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 416-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-400 Cpu 416-3 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 416f-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416f-2"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 416f-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-400 Cpu 416f-3 Pn\/dp"	-	-	Safe
Siemens Search vendor "Siemens"	Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware"	-	-	Affected	in	Siemens Search vendor "Siemens"	Simatic S7-400 Cpu 417-4 Search vendor "Siemens" for product "Simatic S7-400 Cpu 417-4"	-	-	Safe