Vulnerability in SIMATIC S7-300 and S7-400 CPU Families by Siemens
CVE-2016-9159

5.9MEDIUM

Key Information:

Vendor: Siemens
Status: Simatic S7-300 Cpu Family; Simatic S7-300 Cpu Family (incl. Related Et200 Cpus And Siplus Variants); Simatic S7-400 Pn/dp V6 And Below Cpu Family (incl. Siplus Variants); Simatic S7-400 Pn/dp V7 Cpu Family (incl. Siplus Variants)
Vendor: CVE Published:; 17 December 2016

What is CVE-2016-9159?

A vulnerability exists in the Siemens SIMATIC S7-300 and S7-400 CPU families, allowing an attacker with network access via port 102/tcp (ISO-TSAP) or Profibus to potentially obtain sensitive credentials from the programmable logic controller (PLC). This issue affects various models, including related SIPLUS variants, if configured with protection-level 2. It is critical for users of these devices to assess their environment and take necessary precautions to safeguard against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch