CVE-2016-7165

CWE-254CWE-284 — Improper Access Control3 documents3 sources
Severity
6.4MEDIUM
EPSS
0.4%
top 38.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Siemens Simatic NET PC SoftwareSiemens Simatic PCS 7Siemens Simatic Step 7+8 more
Timeline
PublishedNov 15
Latest updateMay 14

Description

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 V5.X (All versions < V5.5 SP4 HF11), SIMATIC WinCC (TIA Portal) Basic, Comfort…

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.5 | Impact: 5.9

Affected Packages11 packages

🔴Vulnerability Details

2
GHSA
GHSA-25rc-xhj7-mqxj: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4↗2022-05-14
▶
CVEList
CVE-2016-7165: A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4↗2016-11-15
▶