ICSA-19-253-03_Siemens Industrial Products (Update P)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...

CVE-2016-8672

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...

CVE-2016-8673: Cross-Site Request Forgery (CSRF)

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...

PT-2016-7550

Name of the Vulnerable Software and Affected Versions SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant versions prior to V3.0.53 SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant versions prior to V3.2.17 SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants affected versions not specified...

PT-2016-7549

Name of the Vulnerable Software and Affected Versions SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant versions prior to V3.0.53 SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant versions prior to V3.2.17 SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants affected versions not specified...

CVE-2016-8672: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...