A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl.

Published 9 y ago 2016-12-17 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.1 · CNA

CISA KEV

not known exploited

EPSS

3.1%

percentile 88%

Public exploits

none known

A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 V6 and earlier CPU family (All versions), SIMATIC S7-400 V7 CPU family (All versions). Specially crafted packets sent to port 80/tcp could cause the affected devices to go into defect mode. A cold restart is required to recover the system.

CISA SSVC assessment

Exploitation: none
Automatable: yes
Technical impact: partial
Assessed: 5 mo ago 2026-06-02

Exploit prediction (EPSS)

3.09% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CISA ADP	3.1	7.5	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CNA	3.1	7.5	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	3.0	7.5	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	7.8	`AV:N/AC:L/Au:N/C:N/I:N/A:C`

Affected products

Siemens AG SIMATIC S7-300 CPU family
Siemens AG SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Siemens AG SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants)
Siemens AG SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)
Siemens AG SIMATIC S7-400 V6 and earlier CPU family
Siemens AG SIMATIC S7-400 V7 CPU family

Classification

Weakness

CWE-20 Improper Input Validation

References

securityfocus.com /bid/94820 · vdb-entry, x_refsource_BID, x_transferred
securitytracker.com /id/1037434 · vdb-entry, x_refsource_SECTRACK, x_transferred
ics-cert.us-cert.gov /advisories/ICSA-16-348-05 · x_refsource_MISC, x_transferred
siemens.com /cert/pool/cert/siemens_security_advisory_ssa-731239.pdf · x_refsource_CONFIRM, x_transferred
cert-portal.siemens.com /productcert/pdf/ssa-731239.pdf · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2016-9158
NVD: CVE-2016-9158

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary