Siemens S7-300/400 PLC (CVE-2016-9158)

A vulnerability has been identified in SIMATIC S7-300 CPU family All versions, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 PN/DP V6 and below CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP V7 CPU family incl. SIPLUS...

CVE-2016-9158

CVE-2016-9158 affects SIMATIC S7-300 CPU family (including related ET200 CPUs and SIPLUS variants) and SIMATIC S7-400 PN/DP V6–V7 (with SIPLUS variants) and SIMATIC S7-410 V8. The issue is improper input handling: specially crafted packets to port 80/tcp can cause the devices to enter defect mode...