PT-2016-5235 · Siemens · Simatic S7-1200 Cpu

Maik Brüggemann + 1 · Publicado 2016-03-16 · Atualizado 2016-12-03 · CVE-2016-2846

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 CPU devices versions prior to 4.0

Description The issue allows remote attackers to bypass a user program block protection mechanism.

Recommendations For versions prior to 4.0, update to version 4.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2016-2846

Produtos afetados

Simatic S7-1200 Cpu

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-2846 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2846 · Nota de Segurança
• http://siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdf · Aviso do Fabricante
• https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01 · Nota