Lucene search

MitreCVE-2016-8561

HistoryNov 18, 2016 - 9:59 p.m.

CVE-2016-8561

2016-11-1821:59:00

CWE-264

mitre

web.nvd.nist.gov

vulnerability

simatic

siplus net

cp 1543-1

cve-2016-8561

nvd

tia-portal

privileged access

security

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.003

Percentile

65.2%

JSON

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices.

Affected configurations

Nvd

Node

siemenssimatic_cp_1543-1Match-

AND

siemenssimatic_cp_1543-1_firmwareMatch-

VendorProductVersionCPE
siemenssimatic_cp_1543-1-cpe:2.3:h:siemens:simatic_cp_1543-1:-:*:*:*:*:*:*:*
siemenssimatic_cp_1543-1_firmware-cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siemens	simatic_cp_1543-1	-	cpe:2.3:h:siemens:simatic_cp_1543-1:-:::::::*
siemens	simatic_cp_1543-1_firmware	-	cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:-:::::::*

References

www.securityfocus.com/bid/94436

www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdf

cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf

ics-cert.us-cert.gov/advisories/ICSA-16-327-01

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.003

Percentile

65.2%

JSON

Related for CVE-2016-8561