What is the CVSS score of CVE-2016-8562?

CVE-2016-8562 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 14.6%.

Is CVE-2016-8562 being actively exploited?

Yes, CVE-2016-8562 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

Is there a patch available for CVE-2016-8562?

Yes, a patch is available for CVE-2016-8562. Update the affected software to the latest version immediately.

Simatic Cp 1543 1 Firmware CVE-2016-8562

HIGH

2016-11-18 cve@mitre.org

Information Disclosure Siemens Simatic Cp 1543 1 Firmware Siplus Net Cp 1543 1 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Added to CISA KEV

Apr 21, 2026 - 15:31 CISA

CVE Published

Nov 18, 2016 - 21:59 cve.org

HIGH 7.5

DescriptionCVE.org

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible to write SNMP variables on port 161/udp which should be read-only and should only be configured with TIA-Portal. A write to these variables could reduce the availability or cause a denial-of-service.

AnalysisAI

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 14.6%.

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.