PT-2016-7673 · Siemens · Simatic S7-300+5
Zhu Wenzhe
·
Publicado
2016-12-17
·
Atualizado
2026-06-02
·
CVE-2016-9159
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SIMATIC S7-300 CPU family versions all
SIMATIC S7-400 PN/DP V6 and below CPU family versions all
SIMATIC S7-400 PN/DP V7 CPU family versions all
SIMATIC S7-400 V6 and earlier CPU family versions all
SIMATIC S7-400 V7 CPU family versions all
SIMATIC S7-410 V8 CPU family versions all
Description
A vulnerability has been identified that allows an attacker with network access to port 102/tcp (ISO-TSAP) or via Profibus to obtain credentials from the PLC if protection-level 2 is configured on the affected devices.
Recommendations
For SIMATIC S7-300 CPU family, consider disabling protection-level 2 until a patch is available.
For SIMATIC S7-400 PN/DP V6 and below CPU family, restrict access to port 102/tcp (ISO-TSAP) to minimize the risk of exploitation.
For SIMATIC S7-400 PN/DP V7 CPU family, avoid using Profibus until the issue is resolved.
For SIMATIC S7-400 V6 and earlier CPU family, consider configuring an alternative protection level.
For SIMATIC S7-400 V7 CPU family, restrict access to the PLC to minimize the risk of exploitation.
For SIMATIC S7-410 V8 CPU family, consider disabling protection-level 2 until a patch is available.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Simatic S7-300
Simatic S7-400 Pn/Dp V6
Simatic S7-400 Pn/Dp V7
Simatic S7-400 V6
Simatic S7-400 V7
Simatic S7-410 V8