CVE-2016-9158: falha de alta gravidade em Siemens AG SIMATIC S7-300 CPU family
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar SIMATIC S7-400 PN/DP V7 CPU family+ Monitorar SIMATIC S7-400 PN/DP V6 and below CPU family
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 3.1%
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions). Specially crafted packets sent to port 80/tcp could cause the affected devices to go into defect mode. A cold restart is required to recover the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Siemens AG · SIMATIC S7-300 CPU familySiemens AG · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens AG · SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)Siemens AG · SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)Siemens AG · SIMATIC S7-400 V6 and earlier CPU familySiemens AG · SIMATIC S7-400 V7 CPU familyCVEs relacionadas — Siemens AG SIMATIC S7-300 CPU family
No mesmo produto, das mais perigosas para as menos.