CVE-2016-5744

Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
siemenssimatic_wincc
7.0
siemenssimatic_wincc
7.0:sp1
siemenssimatic_wincc
7.0:sp2
siemenssimatic_wincc
7.0:sp3
siemenssimatic_wincc
7.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/92116
http://www.securitytracker.com/id/1036441
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01
http://www.securityfocus.com/bid/92116
http://www.securitytracker.com/id/1036441
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-208-01