What is the CVSS score of CVE-2012-3016?

CVE-2012-3016 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 0.9%.

Is there a patch available for CVE-2012-3016?

Yes, a patch is available for CVE-2012-3016. Update the affected software to the latest version immediately.

Simatic S7 400 Cpu Firmware CVE-2012-3016

HIGH

2012-07-31 ics-cert@hq.dhs.gov

Siemens Denial Of Service Simatic S7 400 Cpu Firmware Simatic S7 400 Cpu 412 2 Pn Simatic S7 400 Cpu 414 3 Pn Dp Simatic S7 400 Cpu 414F 3 Pn Dp Simatic S7 400 Cpu 416 3 Pn Dp Simatic S7 400 Cpu 416F 3 Pn Dp

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Jul 31, 2012 - 10:45 cve.org

HIGH 7.8

DescriptionCVE.org

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets.

AnalysisAI

Technical ContextAI

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transition and service outage) via crafted ICMP packets. Affected products include: Siemens Simatic S7-400 Cpu Firmware, Siemens Simatic S7-400 Cpu 412-2 Pn, Siemens Simatic S7-400 Cpu 414-3 Pn\/Dp, Siemens Simatic S7-400 Cpu 414F-3 Pn\/Dp, Siemens Simatic S7-400 Cpu 416-3 Pn\/Dp. Version information: before 6.0.3.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.