CVE-2016-5743: Input Validation
Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5743?
CVE-2016-5743 has a medium severity rating and can lead to unauthorized access.
How do I fix CVE-2016-5743?
To fix CVE-2016-5743, update affected Siemens SIMATIC WinCC and SIMATIC BATCH software to the latest versions.
Which Siemens products are impacted by CVE-2016-5743?
CVE-2016-5743 affects Siemens SIMATIC WinCC versions before 7.3 Update 10, SIMATIC BATCH versions before 8.1 SP1 Update 9, and other related software versions.
What types of vulnerabilities does CVE-2016-5743 address?
CVE-2016-5743 addresses arbitrary file write vulnerabilities in affected Siemens products.
Is there a workaround for CVE-2016-5743?
There is no official workaround for CVE-2016-5743; the advised action is to apply the relevant software updates.