Siemens SIMATIC WinCC and SIMATIC PCS 7 ActiveX Vulnerability

🗓️ 16 Sep 2016 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 50 Views

Siemens SIMATIC WinCC and SIMATIC PCS 7 ActiveX Vulnerability identified and mitigated by Siemens. Impact includes remote exploitation, application memory leakage, and potential system crash. Vulnerability affects older versions of SIMATIC WinCC and SIMATIC PCS 7.

Reporter	Title	Published	Views	Family All 6
CNVD	SIMATIC WinCC and SIMATIC PCS 7 ActiveX Control Security Bypass Vulnerability	15 Dec 201600:00	–	cnvd
CVE	CVE-2016-9160	17 Dec 201603:34	–	cve
Cvelist	CVE-2016-9160	17 Dec 201603:34	–	cvelist
EUVD	EUVD-2016-9977	7 Oct 202500:30	–	euvd
NVD	CVE-2016-9160	17 Dec 201603:59	–	nvd
Prion	Design/Logic Flaw	17 Dec 201603:59	–	prion

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2016/icsa-16-348-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-16-348-04
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

16 Sep 2016 06:00Current

8.1High risk

Vulners AI Score8.1

CVSS 25.8

CVSS 38.1

EPSS0.00489