CVE-2016-2200

Опубликовано: 08 фев. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.

Ссылки

http://www.securityfocus.com/bid/83106
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034954
Third Party Advisory
VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/83106
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034954
Third Party Advisory
VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:h:siemens:simatic_s7-1511-1_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1511c-1_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1511f-1_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1512c-1_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1513-1_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1513f-1_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1515-2_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1515f-2_pn_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1516-3_pn\/dp_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1516f-3_pn\/dp_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1517-3_pn\/dp_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1517f-3_pn\/dp_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1518-4_pn\/dp_cpu:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1518f-4_pn\/dp_cpu:*:*:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*

Версия до 1.8.2 (включая)

EPSS

Процентиль: 93%

0.09239

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-2200

CVSS3: 7.5

debian

почти 10 лет назад

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attacker ...

GHSA-4m2w-vcxc-r9wm

CVSS3: 7.5

github

больше 3 лет назад

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.

EPSS

Процентиль: 93%

0.09239

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20