SSA-672373: Vulnerabilities in CP 1543-1 before V2.0.28
view advisory published 2016-11-18
SIMATIC CP 1543-1 devices before V2.0.28 contain two vulnerabilities that could allow authorized users to escalate their privileges on the CP or create a denial of service condition. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-8562US | high7.5OT critical | KEV | ||
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write… | ||||
| CVE-2016-8561US | medium6.6 | — | ||
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated privileges to TIA-Portal and p… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- FixedSIMATIC CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - FixedSIMATIC CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - FixedSIPLUS NET CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - FixedSIPLUS NET CP 1543-1
Update to V2.0.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan