{"id":"CVE-2016-8562","kind":"vulnerability","aliases":["CVE-2016-8562"],"related":[],"title":"Siemens SIMATIC CP: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","description":"A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service.","summary":"Siemens SIMATIC CP 1543-1 industrial communication processors have an improper privilege management flaw. A privileged remote attacker can crash or disable the device, causing a denial of service.","severity":"high","cvss":7.5,"epss":0.0361,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Siemens SIMATIC CP","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","industrial-control","infrastructure","plc","siemens","simatic"],"not_affected_if":["no-simatic-cp-1543-1"],"how_to_check":null,"fix":"Apply the updates per Siemens vendor instructions; CISA required action is to apply vendor updates. Affected and fixed versions: unknown","status":"open","published_at":"2016-11-18T21:59:02+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:10+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:26:10Z","model":"claude-haiku-5-5","output":{"fix":"Apply the updates per Siemens vendor instructions; CISA required action is to apply vendor updates. Affected and fixed versions: unknown","reach":"network","impact":"low","summary":"Siemens SIMATIC CP 1543-1 industrial communication processors have an improper privilege management flaw. A privileged remote attacker can crash or disable the device, causing a denial of service.","category":"infrastructure","who_cares":["siemens","simatic","industrial-control","plc"],"confidence":0.6,"needs_auth":"yes","worst_case":"Privileged remote attacker causes denial of service on the communication processor","analyst_note":"Exploited in the wild per CISA KEV; find Siemens advisory with affected and fixed firmware versions and remediation steps for CP 1543-1.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-simatic-cp-1543-1"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000463,"input_tokens":2855,"output_tokens":356,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1':8A,34B,68C,76C '-2016':14A,17A '-8562':15A,18A '1543':7A,33B,67C,75C '161/udp':92C 'attack':47B 'avail':116C 'caus':54B,118C 'communic':36B 'condit':82C 'configur':103C 'control':25B 'could':113C 'cp':3A,6A,21A,32B,66C,74C 'crash':49B 'cve':13A,16A 'denial':56B,121C 'denial-of-servic':120C 'devic':53B 'disabl':51B 'exploit':22B 'flaw':43B 'identifi':63C 'improp':9A,40B 'industri':24B,35B 'industrial-control':23B 'infrastructur':26B 'manag':11A,42B 'net':73C 'plc':27B 'port':91C 'portal':107C 'possibl':85C 'privileg':10A,41B,45B 'processor':37B 'read':97C 'read-on':96C 'reduc':114C 'remot':46B 'servic':58B,123C 'siemen':1A,4A,28B,30B 'siemens':19A 'simat':2A,5A,29B,31B,65C 'simatic':20A 'siplus':72C 'snmp':88C 'special':81C 'tia':106C 'tia-port':105C 'v2.0.28':71C,79C 'variabl':89C,112C 'version':70C,78C 'vulner':12A,60C 'write':87C,109C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2016-11-18T21:59:02+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2016-8562","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-8562","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T13:39:32+00:00","note":null},{"source":"epss","external_id":"CVE-2016-8562","url":"https://api.first.org/data/v1/epss?cve=CVE-2016-8562","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2016-8562","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8562","severity":null,"published_at":"2016-11-18T21:59:02+00:00","modified_at":"2026-06-17T00:54:31+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}