CVE-2016-2201

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/83110Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034954Third Party Advisory, VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdfVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/83110Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034954Third Party Advisory, VDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-253230.pdfVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-253230.pdf
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-02Third Party Advisory, US Government Resource

Timeline

Published: Feb 8, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-22025.5The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows CVE-2016-22037.8The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD pa CVE-2016-22048.2The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access vi CVE-2016-22055.7Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.CVE-2016-22065.7The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtua CVE-2016-22078.4The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 CVE-2016-22089.1The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cau CVE-2016-22097.3Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security CVE-2016-22107.3Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Securit CVE-2016-22117.8The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 CVE-2016-22125.3The getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edit CVE-2016-22136.5The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (o