CVE-2016-9159: falha de média gravidade em Siemens AG SIMATIC S7-300 CPU family
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar SIMATIC S7-400 PN/DP V7 CPU family+ Monitorar SIMATIC S7-400 PN/DP V6 and below CPU family
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 1.5%
A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions), SIMATIC S7-410 V8 CPU family (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions). An attacker with network access to port 102/tcp (ISO-TSAP) or via Profibus could obtain credentials from the PLC if protection-level 2 is configured on the affected devices.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Siemens AG · SIMATIC S7-300 CPU familySiemens AG · SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)Siemens AG · SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)Siemens AG · SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)Siemens AG · SIMATIC S7-400 V6 and earlier CPU familySiemens AG · SIMATIC S7-400 V7 CPU familySiemens AG · SIMATIC S7-410 V8 CPU familySiemens AG · SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)CVEs relacionadas — Siemens AG SIMATIC S7-300 CPU family
No mesmo produto, das mais perigosas para as menos.