Actively exploited · Published Nov 18, 2016 · Assigned by mitre

CVE-2016-8562

High 7.5 Exploited

In plain English

A high-severity security flaw in SIMATIC CP from Siemens. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). The chance it is exploited in the next 30 days is estimated at 3.6% (higher than 90% of all known vulnerabilities). Apply updates per vendor instructions.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)3.6%top 10.5% of all CVEs

Exploited in the wildYesCISA KEV since Mar 3, 2022

Attack toolingNoneno public tooling known

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Mar 24, 2022.

Official description

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

94436 vdb-entry, x_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01 x_refsource_MISC
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf x_refsource_CONFIRM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-8562 government-resource