CVE-2016-5743 Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as dist...
CriticalCVSS 9.8
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens simatic batch | <= 7.1 | No fix listed |
| Siemens simatic wincc | <= 7.3 | No fix listed |
| Siemens simatic wincc | <= 7.4 | No fix listed |
| Siemens simatic openpcs 7 | <= 8.1 | No fix listed |
| Siemens simatic openpcs 7 | <= 8.2 | No fix listed |
References
- 92112 third-party-advisory vdb-entry
- 1036441 third-party-advisory vdb-entry
- www.siemens.com mitigation vendor-advisory
- ics-cert.us-cert.gov