CVE-2016-5743: siemens simatic_batch Improper Input Validation
Vulnerability summary
CVE-2016-5743 is a high (CVSS 10.0) Improper Input Validation vulnerability in siemens simatic_batch. EPSS estimates a 10.49% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.
Timeline
- 22-07-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
10.49%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.49% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens3 products
- simatic_batch≤ 7.1
- simatic_openpcs_7≤ 8.1 | ≤ 8.2
- simatic_wincc≤ 7.3 | ≤ 7.4
1 vendor · 3 products
References
4 links- ics-cert.us-cert.gov/advisories/ICSA-16-208-01X Refsource MISC
- www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-378531.pdfX Refsource CONFIRMMitigationVendor Advisory