CVE-2016-8561

Опубликовано: 18 нояб. 2016

Источник: nvd

CVSS3: 6.6

CVSS2: 6

EPSS Низкий

Описание

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices.

Ссылки

http://www.securityfocus.com/bid/94436
Third Party Advisory
VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01
http://www.securityfocus.com/bid/94436
Third Party Advisory
VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00548

Низкий

6.6 Medium

CVSS3

6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-6xmx-v4m3-j532