CVE-2015-8214

A vulnerability has been identified in SIMATIC NET CP 342-5 (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions < V3.0.44), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions < V3.1.1), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions < V3.1.1), SIMATIC NET CP 443-1 Advanced (incl. SIPLUS variants) (All versions < V3.2.9), SIMATIC NET CP 443-1 Standard (incl. SIPLUS variants) (All versions < V3.2.9), SIMATIC NET CP 443-5 Basic (incl. SIPLUS variants) (All versions), SIMATIC NET CP 443-5 Extended (All versions), TIM 3V-IE / TIM 3V-IE Advanced (incl. SIPLUS NET variants) (All versions < V2.6.0), TIM 3V-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.1.0), TIM 4R-IE (incl. SIPLUS NET variants) (All versions < V2.6.0), TIM 4R-IE DNP3 (incl. SIPLUS NET variants) (All versions < V3.1.0). The implemented access protection level enforcement of the affected communication processors (CP) could possibly allow unauthenticated users to perform administrative operations on the CPs if network access (port 102/TCP) is available and the CPs' configuration was stored on their corresponding CPUs.

• CWE-264

• http://www.securityfocus.com/bid/78345
• http://www.securitytracker.com/id/1034279
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-763427.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf
• http://www.securityfocus.com/bid/78345
• http://www.securitytracker.com/id/1034279
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-763427.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf

Published

Nov 27, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8208Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8209Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8210Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8211Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-8212CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, …
• CVE-2015-8213The get_format function in utils/formats.py in Django before…
• CVE-2015-8215net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel be…
• CVE-2015-8216The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c …
• CVE-2015-8217The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FF…
• CVE-2015-8218The decode_uncompressed function in libavcodec/faxcompr.c in…
• CVE-2015-8219The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg…
• CVE-2015-8220Stack-based buffer overflow in the URI handler in DWRCC.exe …