← Back

CVE-2016-9160

nvd nist
Published: Dec 17, 2016Modified: May 6, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Exploitability: 2.8 / Impact: 5.2
Source: NVD

Description

A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.

Affected (2)

Siemens
2 products
Simatic Pcs 7
Simatic Wincc
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Simatic Pcs 7
Up to 8.0
Simatic Wincc
Up to 7.1

Related CWEs

CWE-111
Direct Use of Unsafe JNI
When a Java application uses the Java Native Interface (JNI) to call code written in another programming language, it can expose the application to weaknesses in that code, even if those weaknesses cannot occur in Java.
CWE-254
CWE-254

References (8)

Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: productcert@siemens.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.