Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-8214

A vulnerability has been identified in SIMATIC NET CP 342-5 (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions < V3.0.44), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions < V3.1.1), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions < V3.1.1), SIMATIC NET CP 443-1 Advanced (incl. SIPLUS variants) (All versions < V3.2.9), SIMATIC NET CP 443-1 Standard (incl. SIPLUS variants) (All versions < V3.2.9), SIMATIC NET CP 443-5 Basic (incl. SIPLUS variants) (All versions), SIMATIC NET CP 443-5 Extended (All versions), TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.6.0), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.1.0), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.6.0), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.1.0). The implemented access protection level enforcement of the affected communication processors (CP) could possibly allow unauthenticated users to perform administrative operations on the CPs if network access (port 102/TCP) is available and the CPs' configuration was stored on their corresponding CPUs.

Published

2015-11-27T15:59:00.133

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.7 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

9.5

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens simatic_cp_443-1_firmware * Yes
Operating System siemens simatic_cp_443-1_firmware * Yes
Hardware siemens simatic_cp_443-1 * No
Operating System siemens simatic_tim_4r-ie_firmware * Yes
Operating System siemens simatic_tim_4r-ie_firmware * Yes
Hardware siemens simatic_tim_4r-ie * No
Operating System siemens simatic_cp_343-1_firmware * Yes
Operating System siemens simatic_cp_343-1_firmware ≤ 3.0 Yes
Hardware siemens simatic_cp_343-1 - No
Operating System siemens simatic_tim_3v-ie_firmware - Yes
Operating System siemens simatic_tim_3v-ie_firmware - Yes
Operating System siemens simatic_tim_3v-ie_firmware - Yes
Hardware siemens simatic_tim_3v-ie * No
References