CVE-2016-7433: Medium severity Siemens SIMATIC NET CP 443-1 OPC UA vulnerability

Published Jan 13, 2017
·
Updated

Last updated 24 July 2024

Other sources

NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."

Affected Software

3 affected componentsFixes available
debian/ntp
1:4.2.8p15+dfsg-1
Siemens SIMATIC NET CP 443-1 OPC UA
NTP ntp<=4.2.8

Event History

Jan 13, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:21 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:16 AM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is CVE-2016-7433?

CVE-2016-7433 is a vulnerability in NTP (Network Time Protocol) before version 4.2.8p9.

2

How severe is CVE-2016-7433?

CVE-2016-7433 has a severity rating of 5.3, which is considered medium.

3

How does CVE-2016-7433 affect NTP?

CVE-2016-7433 affects NTP by causing the initial sync calculations to be performed improperly.

4

What is the remedy for CVE-2016-7433?

The remedy for CVE-2016-7433 is to update NTP to version 4.2.8p9 or later.

5

Where can I find more information about CVE-2016-7433?

You can find more information about CVE-2016-7433 at the following references: [http://nwtime.org/ntp428p9_release/](http://nwtime.org/ntp428p9_release/), [http://support.ntp.org/bin/view/Main/NtpBug3067](http://support.ntp.org/bin/view/Main/NtpBug3067), [http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities](http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203