← CVE Radar
CVE-2016-8562Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service.
7.5 HIGHEPSS 3.61%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.5 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 3.5 | LOW | 2.0NVD | AV:N/AC:M/Au:S/C:N/I:N/A:P |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2016-8562
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Nov 18, 2016
- Last modified
- 2026-06-17 00:54 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
siemenssimatic cp 1543-1 firmware1 version range
- before 2.0.28
siemenssiplus net cp 1543-1 firmware1 version range
- before 2.0.28
References
- securityfocus.com http://www.securityfocus.com/bid/94436
- siemens.com http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf
- cert-portal.siemens.com https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
- ics-cert.us-cert.gov https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-8562