CVE-2016-3949: High severity siemens simatic s7-300 with profitnet support firmware vulnerability
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service (defect-mode transition) via crafted (1) ISO-TSAP or (2) Profibus packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3949?
CVE-2016-3949 is classified as a high-severity vulnerability due to its potential to cause denial of service in affected Siemens devices.
How do I fix CVE-2016-3949?
To mitigate CVE-2016-3949, update the firmware to version 3.2.12 or higher for Profinet-enabled CPUs and to version 3.3.12 or higher for Profinet-disabled CPUs.
Which devices are affected by CVE-2016-3949?
CVE-2016-3949 affects Siemens SIMATIC S7-300 Profinet-enabled CPUs with firmware before 3.2.12 and Profinet-disabled CPUs with firmware before 3.3.12.
What type of attack does CVE-2016-3949 enable?
CVE-2016-3949 allows remote attackers to perform denial of service attacks via crafted ISO-TSAP or Profibus packets.
Is CVE-2016-3949 exploitable remotely?
Yes, CVE-2016-3949 is exploitable remotely, allowing attackers to send malicious packets to affect the operation of the device.