CVE-2016-2201: Input Validation
First published: Mon Feb 08 2016(Updated: )
Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens S7-1500 CPU firmware | =1.8.2 | |
| Siemens SIMATIC S7-1511-1 PN CPU | ||
| Siemens SIMATIC S7-1511C-1 PN CPU | ||
| Siemens SIMATIC S7-1500 CPU 1511f-1 PN | ||
| Siemens SIMATIC S7-1500 CPU 1512C-1 PN | ||
| Siemens SIMATIC S7-1513-1 PN CPU | ||
| Siemens SIMATIC S7-1500 CPU 1513f-1 PN | ||
| Siemens SIMATIC S7-1515-2 PN CPU | ||
| Siemens SIMATIC S7-1515F-2 PN CPU | ||
| Siemens SIMATIC s7-1516-3 pn/dp CPU | ||
| Siemens SIMATIC s7-1516f-3 pn/dp CPU | ||
| Siemens SIMATIC S7-1517-3 PN/DP CPU | ||
| Siemens SIMATIC s7-1517f-3 pn/dp CPU | ||
| Siemens SIMATIC S7-1518-4 PN/DP CPU | ||
| Siemens SIMATIC s7-1518f-4 pn/dp CPU |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-2201?
CVE-2016-2201 is classified as a medium severity vulnerability.
How do I fix CVE-2016-2201?
To fix CVE-2016-2201, update the Siemens SIMATIC S7-1500 CPU devices to firmware version 1.8.3 or later.
Who is affected by CVE-2016-2201?
CVE-2016-2201 affects Siemens SIMATIC S7-1500 CPU devices running firmware versions prior to 1.8.3.
What kind of attacks can exploit CVE-2016-2201?
CVE-2016-2201 can be exploited by remote attackers to bypass a replay protection mechanism.
What is the attack vector for CVE-2016-2201?
The attack vector for CVE-2016-2201 is through packets sent to TCP port 102.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens s7-1500 cpu firmware
- version/siemens s7-1500 cpu firmware/1.8.2
- canonical/siemens simatic s7-1511-1 pn cpu
- canonical/siemens simatic s7-1511c-1 pn cpu
- canonical/siemens simatic s7-1500 cpu 1511f-1 pn
- canonical/siemens simatic s7-1500 cpu 1512c-1 pn
- canonical/siemens simatic s7-1513-1 pn cpu
- canonical/siemens simatic s7-1500 cpu 1513f-1 pn
- canonical/siemens simatic s7-1515-2 pn cpu
- canonical/siemens simatic s7-1515f-2 pn cpu
- canonical/siemens simatic s7-1516-3 pn/dp cpu
- canonical/siemens simatic s7-1516f-3 pn/dp cpu
- canonical/siemens simatic s7-1517-3 pn/dp cpu
- canonical/siemens simatic s7-1517f-3 pn/dp cpu
- canonical/siemens simatic s7-1518-4 pn/dp cpu
- canonical/siemens simatic s7-1518f-4 pn/dp cpu