CVE-2016-2201

Опубликовано: 08 фев. 2016

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.

Ссылки

http://www.securityfocus.com/bid/83110
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034954
Third Party Advisory
VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/83110
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034954
Third Party Advisory
VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.8.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:siemens:simatic_s7-1511-1_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1511c-1_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1511f-1_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1512c-1_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1513-1_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1513f-1_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1515-2_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1515f-2_pn_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1516-3_pn\/dp_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1516f-3_pn\/dp_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1517-3_pn\/dp_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1517f-3_pn\/dp_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1518-4_pn\/dp_cpu:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_s7-1518f-4_pn\/dp_cpu:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.0161

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2016-2201

CVSS3: 5.3

debian

почти 10 лет назад

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attacker ...

GHSA-4597-h46x-2mwj

CVSS3: 5.3

github

больше 3 лет назад

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.

EPSS

Процентиль: 81%

0.0161

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20