CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-9159

A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions), SIMATIC S7-410 V8 CPU family (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions). An attacker with network access to port 102/tcp (ISO-TSAP) or via Profibus could obtain credentials from the PLC if protection-level 2 is configured on the affected devices.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.9%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2016-9159

Siemens » Simatic S7-300 Cpu 312 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_312:-
Siemens » Simatic S7-300 Cpu 314 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_314:-
Siemens » Simatic S7-300 Cpu 315-2 Dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_dp:-
Siemens » Simatic S7-300 Cpu 315-2 Pn/dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_315-2_pn/dp:-
Siemens » Simatic S7-300 Cpu 317-2 Pn/dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_317-2_pn/dp:-
Siemens » Simatic S7-300 Cpu 317- 2 Dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_317-_2_dp:-
Siemens » Simatic S7-300 Cpu 319-3 Pn/dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-300_cpu_319-3_pn/dp:-
Siemens » Simatic S7-400 Cpu 412-1 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_412-1:-
Siemens » Simatic S7-400 Cpu 412-2 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_412-2:-
Siemens » Simatic S7-400 Cpu 412-2 Pn » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_412-2_pn:-
Siemens » Simatic S7-400 Cpu 414-2 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_414-2:-
Siemens » Simatic S7-400 Cpu 414-3 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_414-3:-
Siemens » Simatic S7-400 Cpu 414-3 Pn/dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_414-3_pn/dp:-
Siemens » Simatic S7-400 Cpu 416-2 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_416-2:-
Siemens » Simatic S7-400 Cpu 416-3 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_416-3:-
Siemens » Simatic S7-400 Cpu 416-3 Pn/dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_416-3_pn/dp:-
Siemens » Simatic S7-400 Cpu 416f-2 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_416f-2:-
Siemens » Simatic S7-400 Cpu 416f-3 Pn/dp » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_416f-3_pn/dp:-
Siemens » Simatic S7-400 Cpu 417-4 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-400_cpu_417-4:-
Siemens » Simatic S7-300 Cpu Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:-
Siemens » Simatic S7-400 Cpu Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_s7-400_cpu_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-9159

Products

Pricing

Contact Us