CVE-2016-8562 — Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

provenance: imported · CVE: CVE-2016-8562

CVE-2016-8562: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Siemens
Product	SIMATIC CP
Date added	2022-03-03
Due date	2022-03-24
Ransomware campaign use	Unknown

Description

An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged attacker to remotely cause a denial of service.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-8562

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8562
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog