CVE-2016-5743

Critical

Published: 22/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in Siemens SIMATIC WinCC, SIMATIC BATCH, and SIMATIC OpenPCS allows remote attackers to execute arbitrary code via crafted packets. This affects versions before specified updates.

Risk Assessment

Remote code execution could lead to system takeover, posing a serious threat to the integrity and availability of industrial infrastructure.

Recommendation

It is recommended to update to the latest software versions that include security patches addressing this vulnerability.

Original NVD description (English source)

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.1 Update 3 as distributed in SIMATIC PCS 7 through 8.1 SP1, SIMATIC OpenPCS 7 before 8.2 Update 1 as distributed in SIMATIC PCS 7 8.2, and SIMATIC WinCC Runtime Professional before 13 SP1 Update 9 allow remote attackers to execute arbitrary code via crafted packets.