CVE-2016-8562

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2016-8562 affects Siemens SIMATIC CP 1543-1 and SIPLUS NET CP 1543-1 devices in all versions prior to V2.0.28. It permits writing to certain SNMP variables exposed on UDP port 161 that are designed to be read-only and configurable exclusively through TIA-Portal, under special conditions. Successful modification of these variables can degrade device availability or trigger a denial-of-service condition.

An attacker with network access and low privileges may exploit the flaw by sending crafted SNMP writes to the affected port. The CVSS vector indicates the attack requires high complexity yet can result in high impact across confidentiality, integrity, and availability when conditions are met.

Siemens security advisory SSA-672373 and the related ICS-CERT advisory ICSA-16-327-01 both direct users to apply firmware version V2.0.28 or later, which corrects the improper write access on the SNMP interface. The advisories are available at the Siemens and US-CERT reference URLs provided for the CVE.