CVE-2016-9160: A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a…

high8.1CVSS 3.0

AVNACLPRNUIRSUCHINAH

A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	simatic_pcs_7	<= 8.0	—
siemens	simatic_wincc	<= 7.1	—