NVD

Id
19689  
Name
CVE-2016-3949  
Description
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service (defect-mode transition) via crafted (1) ISO-TSAP or (2) Profibus packets.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-06-27  
Modified Date
2016-08-18  
Seq
2016-3949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107866 19689 CVE-2016-3949 1036089  View
107867 19689 CVE-2016-3949 http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-818183.pdf  View
107868 19689 CVE-2016-3949 https://ics-cert.us-cert.gov/advisories/ICSA-16-161-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2583 JVNDB-2016-003356 Siemens SIMATIC S7-300 の Profinet 有効および無効の CPU デバイスのファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 Siemens SIMATIC S7-300 の Profinet 有効および無効の CPU デバイスのファームウェアには、サービス運用妨害 (defect-mode への遷移) 状態にされる脆弱性が存在します。 CVE-2016-3949 90455 CVE-2016-3949 19689 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003356.html 2016-06-08 2016-06-29 View