CVE-2016-8562

Siemens SIMATIC CP 1543-1 Improper Privilege Management

7.5 HIGHActively exploited (CISA KEV)EPSS 3.61%

Published18 Nov 2016
Added to CISA KEV3 Mar 2022
Remediation due24 Mar 2022

Description

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityHigh

Privileges requiredLow

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Siemens Simatic Cp 1543-1 Firmware< 2.0.28

Siemens Siplus Net Cp 1543-1 Firmware< 2.0.28

Remediation

Fixed in

Siemens Simatic Cp 1543-1 Firmware≥ 2.0.28

Siemens Siplus Net Cp 1543-1 Firmware≥ 2.0.28

Patch & vendor advisories

References

https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdfVendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01Third Party AdvisoryUS Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-8562US Government Resource
http://www.securityfocus.com/bid/94436Broken LinkThird Party AdvisoryVDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdfBroken LinkPatchVendor Advisory

Frequently asked

Is CVE-2016-8562 being actively exploited?

Yes. CVE-2016-8562 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 3 Mar 2022.

How severe is CVE-2016-8562?

CVE-2016-8562 has a CVSS 3.1 base score of 7.5, rated high. EPSS estimates a 3.61% probability of exploitation.

Which products are affected by CVE-2016-8562?

Affected products include Siemens Simatic Cp 1543-1 Firmware, Siemens Siplus Net Cp 1543-1 Firmware.

How do I fix CVE-2016-8562?

Upgrade affected software to a fixed version, for example Siemens Simatic Cp 1543-1 Firmware 2.0.28, Siemens Siplus Net Cp 1543-1 Firmware 2.0.28 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2016-8562 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.