CVE-2016-9159
Severity Score
5.9
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions), SIMATIC S7-410 V8 CPU family (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions). An attacker with network access to port 102/tcp (ISO-TSAP) or via Profibus could obtain credentials from the PLC if protection-level 2 is configured on the affected devices.
Se ha identificado una vulnerabilidad en la familia de CPU SIMATIC S7-300 (todas las versiones), la familia de CPU SIMATIC S7-300 (incluidas las CPU ET200 relacionadas y las variantes SIPLUS) (todas las versiones), SIMATIC S7-400 PN / DP V6 y familias de CPU inferiores (incl. variantes SIPLUS) (todas las versiones), familia de CPU SIMATIC S7-400 PN / DP V7 (incl. variantes SIPLUS) (todas las versiones), SIMATIC S7-400 V6 y familia de CPU anterior (todas las versiones), SIMATIC S7-400 Familia de CPU V7 (todas las versiones), familia de CPU SIMATIC S7-410 V8 (todas las versiones), familia de CPU SIMATIC S7-410 V8 (incluidas las variantes SIPLUS) (todas las versiones). Un atacante con acceso de red al puerto 102 / tcp (ISO-TSAP) o a través de Profibus podría obtener credenciales del PLC si el nivel de protección 2 está configurado en los dispositivos afectados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-11-03 CVE Reserved
- 2016-12-17 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/94820 | Vdb Entry | |
| http://www.securitytracker.com/id/1037434 | Vdb Entry | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf | X_refsource_misc |
|
| https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05 | X_refsource_misc | |
| https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 312 Search vendor "Siemens" for product "Simatic S7-300 Cpu 312" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 314 Search vendor "Siemens" for product "Simatic S7-300 Cpu 314" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315-2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 315-2 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 315-2 Pn\/dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317- 2 Dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317- 2 Dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 317-2 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 317-2 Pn\/dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-300 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-300 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-300 Cpu 319-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-300 Cpu 319-3 Pn\/dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 412-1 Search vendor "Siemens" for product "Simatic S7-400 Cpu 412-1" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 412-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 412-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 412-2 Pn Search vendor "Siemens" for product "Simatic S7-400 Cpu 412-2 Pn" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 414-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 414-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 414-3 Search vendor "Siemens" for product "Simatic S7-400 Cpu 414-3" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 414-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-400 Cpu 414-3 Pn\/dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416-3 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416-3" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-400 Cpu 416-3 Pn\/dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416f-2 Search vendor "Siemens" for product "Simatic S7-400 Cpu 416f-2" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 416f-3 Pn\/dp Search vendor "Siemens" for product "Simatic S7-400 Cpu 416f-3 Pn\/dp" | - | - |
Safe
|
| Siemens Search vendor "Siemens" | Simatic S7-400 Cpu Firmware Search vendor "Siemens" for product "Simatic S7-400 Cpu Firmware" | - | - |
Affected
| in | Siemens Search vendor "Siemens" | Simatic S7-400 Cpu 417-4 Search vendor "Siemens" for product "Simatic S7-400 Cpu 417-4" | - | - |
Safe
|