CVE-2016-9158 : A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions),

A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions). Specially crafted packets sent to port 80/tcp could cause the affected devices to go into defect mode. A cold restart is required to recover the system.

Published 2016-12-17 03:59:00

Updated 2025-04-12 10:46:41

Source Siemens AG

View at NVD, CVE.org

Products affected by CVE-2016-9158

Siemens » Simatic S7-400 Cpu Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_s7-400_cpu_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-400 Cpu 412-1 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 412-2 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 412-2 Pn » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 414-2 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 414-3 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 414-3 Pn/dp » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 416-2 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 416-3 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 416-3 Pn/dp » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 416f-2 » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 416f-3 Pn/dp » Version: N/A
When used together with: Siemens » Simatic S7-400 Cpu 417-4 » Version: N/A
Siemens » Simatic S7-300 Cpu Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic S7-300 Cpu 312 » Version: N/A
When used together with: Siemens » Simatic S7-300 Cpu 314 » Version: N/A
When used together with: Siemens » Simatic S7-300 Cpu 315-2 Dp » Version: N/A
When used together with: Siemens » Simatic S7-300 Cpu 315-2 Pn/dp » Version: N/A
When used together with: Siemens » Simatic S7-300 Cpu 317- 2 Dp » Version: N/A
When used together with: Siemens » Simatic S7-300 Cpu 317-2 Pn/dp » Version: N/A
When used together with: Siemens » Simatic S7-300 Cpu 319-3 Pn/dp » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-9158

EPSS FAQ

1.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-9158

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2016-9158

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- nvd@nist.gov (Primary)
- productcert@siemens.com (Secondary)

References for CVE-2016-9158

http://www.securitytracker.com/id/1037434

Siemens SIMATIC Controller Flaws Let Remote Users Obtain Credentials and Cause Denial of Service Conditions - SecurityTracker

CVEs referencing this url
https://cert-portal.siemens.com/productcert/pdf/ssa-731239.pdf

CVEs referencing this url
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-731239.pdf

CVEs referencing this url
http://www.securityfocus.com/bid/94820

SIMATIC S7-300 and S7-400 CPUs Denial of Service and Information Disclosure Vulnerabilities

CVEs referencing this url
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-05

Siemens S7-300/400 PLC Vulnerabilities (Update D) | CISA

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2016-9158

Products affected by CVE-2016-9158

Exploit prediction scoring system (EPSS) score for CVE-2016-9158

CVSS scores for CVE-2016-9158

CWE ids for CVE-2016-9158

References for CVE-2016-9158