cbcvebase.
CVE-2016-5743
published 2016-07-22

CVE-2016-5743: Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1…

PriorityP261critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
10.49%
95.2th percentile
Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.

Affected

5 ranges
VendorProductVersion rangeFixed in
siemenssimatic_batch<= 7.1
siemenssimatic_openpcs_7<= 8.1
siemenssimatic_openpcs_7<= 8.2
siemenssimatic_wincc<= 7.3
siemenssimatic_wincc<= 7.4

Detection & IOCsextracted from sources · hover to see the quote

  • Detect specially crafted packets targeting SIMATIC WinCC or WinCC Runtime Professional services, which could indicate remote code execution attempts by unauthenticated users
  • Monitor for unauthenticated network connections to WinCC stations from outside trusted network segments, particularly any attempts to interact with WinCC communication services
  • ·No known public exploits specifically target these vulnerabilities at time of advisory publication, limiting concrete IOC availability
  • ·The vulnerability is exploitable by low-skill attackers remotely with no authentication required (CVSS 9.8), broadening the potential attacker pool
  • ·CVE-2016-5743 affects multiple product lines and version branches; detection scope must cover all listed affected versions across WinCC, PCS 7, SIMATIC BATCH, OpenPCS 7, and WinCC Runtime Professional

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.