CVE-2016-5743
critical · 9.8Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.
9.8
CVSS
10.5%
EPSS (exploit prob.)
96th
EPSS percentile
2016-07-22
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| siemens | simatic_batch | <= 7.1 |
| siemens | simatic_wincc | <= 7.3 |
| siemens | simatic_wincc | <= 7.4 |
| siemens | simatic_pcs_7 | <= 8.1 |
| siemens | simatic_openpcs_7 | <= 8.1 |
| siemens | simatic_pcs_7 | <= 8.1 |
| siemens | simatic_openpcs_7 | <= 8.2 |
| siemens | simatic_pcs_7 | <= 8.2 |
| siemens | simatic_wincc_runtime_professional | <= 13 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/92112
- http://www.securitytracker.com/id/1036441
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01
- http://www.securityfocus.com/bid/92112
- http://www.securitytracker.com/id/1036441
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-5743