CVE-2016-8562
HighActively exploited (CISA KEV)
Description
A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens SIMATIC CP
PublishedNov 18, 2016
First seenNov 18, 2016
Added to KEVMar 3, 2022
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Mar 24, 2022Update
- siemens simatic_cp_1543-1_firmware2.0.28 or later
- siemens siplus_net_cp_1543-1_firmware2.0.28 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_cp_1543-1_firmware | v < 2.0.28 | 2.0.28 |
| siemens siplus_net_cp_1543-1_firmware | v < 2.0.28 | 2.0.28 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.