Is CVE-2016-8562 exploited in the wild?

Yes. CVE-2016-8562 is known to be exploited in the wild, first recorded on 3 March 2022. Treat it as urgent.

How severe is CVE-2016-8562?

Critical severity, with a CVSS score of 7.5, published 3 March 2022.

Which products and versions are affected?

Siemens SIMATIC CP 1543-1 All versions < V2.0.28; Siemens SIPLUS NET CP 1543-1 All versions < V2.0.28.

Is there a fix for CVE-2016-8562?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2016-8562 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2016-8562?

Check whether you run Siemens SIMATIC CP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-8562: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

Q: Is there a fix for CVE-2016-8562?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2016-8562 attacked?

It is attacked over the network, in device firmware.

Q: Am I affected by CVE-2016-8562?

Check whether you run Siemens SIMATIC CP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-8562 · Severity: critical · CVSS 7.5 · Exploited in the wild · Published 2022-03-03

Siemens SIMATIC CP 1543-1 and SIPLUS NET CP 1543-1 devices contain an improper privilege management vulnerability where SNMP variables on port 161/udp that should be read-only can be written to. A privileged attacker can exploit this to remotely cause a denial-of-service or reduce system availability.

Vendors: Siemens.

Quick answers

Is CVE-2016-8562 exploited in the wild?: Yes. CVE-2016-8562 is known to be exploited in the wild, first recorded on 3 March 2022. Treat it as urgent.
How severe is CVE-2016-8562?: Critical severity, with a CVSS score of 7.5, published 3 March 2022.
Which products and versions are affected?: Siemens SIMATIC CP 1543-1 All versions < V2.0.28; Siemens SIPLUS NET CP 1543-1 All versions < V2.0.28.
Is there a fix for CVE-2016-8562?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2016-8562 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2016-8562?: Check whether you run Siemens SIMATIC CP. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

Siemens SIMATIC CP 1543-1 All versions < V2.0.28
Siemens SIPLUS NET CP 1543-1 All versions < V2.0.28

Timeline

2016-11-17: disclosed: Initial security focus and advisory publication date based on external references
2022-03-03: kev added: Date added to CISA's Known Exploited Vulnerabilities Catalog
2022-03-03: disclosed: NVD publication date

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.