Vulnerability Description
Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors.
CVSS Score
6.5
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Simatic S7 1200 Cpu | - |
| Siemens | Simatic S7 Cpu 1200 Firmware | <= 3.0.2 |
Related Weaknesses (CWE)
References
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-833048.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-833048.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-16-075-01
FAQ
What is CVE-2016-2846?
CVE-2016-2846 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors.
How severe is CVE-2016-2846?
CVE-2016-2846 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2846?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic S7 1200 Cpu, Siemens Simatic S7 Cpu 1200 Firmware.