CVE-2016-9160 - Vulnerability Details - OpenCVE

A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Siemens	Simatic Pcs 7 Simatic Wincc

Configuration 1 [-]

OR	cpe:2.3:a:siemens:simatic_pcs_7::::::::
	cpe:2.3:a:siemens:simatic_wincc::::::::

No data.

References

Link	Providers
http://www.securityfocus.com/bid/94825
http://www.securitytracker.com/id/1037435
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04

History

No history.

MITRE

Status: PUBLISHED

Assigner: siemens

Published: 2016-12-17T03:34:00

Updated: 2024-08-06T02:42:11.100Z

Reserved: 2016-11-03T00:00:00

Link: CVE-2016-9160

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2016-12-17T03:59:00.263

Modified: 2025-04-12T10:46:40.837

Link: CVE-2016-9160

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1)", "vendor": "n/a", "versions": [{"status": "affected", "version": "SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1)"}]}], "datePublic": "2016-12-16T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-111", "description": "CWE-111: Direct Use of Unsafe JNI", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2017-07-26T09:57:01", "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf"}, {"name": "1037435", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1037435"}, {"tags": ["x_refsource_MISC"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04"}, {"name": "94825", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94825"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "productcert@siemens.com", "ID": "CVE-2016-9160", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1)", "version": {"version_data": [{"version_value": "SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1)"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-111: Direct Use of Unsafe JNI"}]}]}, "references": {"reference_data": [{"name": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf", "refsource": "CONFIRM", "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf"}, {"name": "1037435", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1037435"}, {"name": "https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04"}, {"name": "94825", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94825"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:42:11.100Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf"}, {"name": "1037435", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1037435"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04"}, {"name": "94825", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/94825"}]}]}, "cveMetadata": {"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2016-9160", "datePublished": "2016-12-17T03:34:00", "dateReserved": "2016-11-03T00:00:00", "dateUpdated": "2024-08-06T02:42:11.100Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*", "matchCriteriaId": "78F045C4-8DC2-4FA8-833D-B430EA26F2A0", "versionEndIncluding": "8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*", "matchCriteriaId": "71370ADD-85DC-407A-99F3-8F5386EBFBCE", "versionEndIncluding": "7.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions."}, {"lang": "es", "value": "Una vulnerabilidad en SIEMENS SIMATIC WinCC (Todas las versions < SIMATIC WinCC V7.2) y SIEMENS SIMATIC PCS 7 (Todas las versiones < SIMATIC PCS 7 V8.0 SP1) podr\u00eda permitir a un atacante remoto bloquear un componente ActiveX o filtrar partes de la memoria de aplicaci\u00f3n si un usuario es enga\u00f1ado para hacer clic en un enlace malicioso bajo ciertas condiciones."}], "id": "CVE-2016-9160", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-12-17T03:59:00.263", "references": [{"source": "productcert@siemens.com", "url": "http://www.securityfocus.com/bid/94825"}, {"source": "productcert@siemens.com", "url": "http://www.securitytracker.com/id/1037435"}, {"source": "productcert@siemens.com", "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf"}, {"source": "productcert@siemens.com", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/94825"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1037435"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-348-04"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-111"}], "source": "productcert@siemens.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-254"}], "source": "nvd@nist.gov", "type": "Primary"}]}