CVE-2016-5744

CWE-200 — Information Exposure3 documents3 sources
Severity
7.5HIGH
EPSS
0.8%
top 26.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Siemens Simatic Wincc
Timeline
PublishedJul 22
Latest updateMay 17

Description

Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDsiemens/simatic_wincc7.0, 7.2+1

🔴Vulnerability Details

2
GHSA
GHSA-g5pr-xc4w-x864: Siemens SIMATIC WinCC 7↗2022-05-17
▶
CVEList
CVE-2016-5744: Siemens SIMATIC WinCC 7↗2016-07-22
▶
CVE-2016-5744 (HIGH CVSS 7.5) | Siemens SIMATIC WinCC 7.0 through S | cvebase.io