CVE-2016-3949

Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service (defect-mode transition) via crafted (1) ISO-TSAP or (2) Profibus packets.

• CWE-399

• http://www.securitytracker.com/id/1036089Third Party Advisory, VDB Entry
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-818183.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-818183.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-16-161-01Mitigation, Third Party Advisory, US Government Resource
• http://www.securitytracker.com/id/1036089Third Party Advisory, VDB Entry
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-818183.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-818183.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-16-161-01Mitigation, Third Party Advisory, US Government Resource

Published

Jun 27, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3943Panda Endpoint Administration Agent before 7.50.00, as used …7.8
• CVE-2016-3944UpdateAgent in Lenovo Accelerator Application allows man-in-…
• CVE-2016-3945Multiple integer overflows in the (1) cvt_by_strip and (2) c…
• CVE-2016-3946SAP Console (aka SAPConsole) 7.30 allows local users to disc…
• CVE-2016-3947Heap-based buffer overflow in the Icmp6::Recv function in ic…
• CVE-2016-3948Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perf…
• CVE-2016-3950Huawei AR3200 routers with software before V200R006C10SPC300…
• CVE-2016-3951Double free vulnerability in drivers/net/usb/cdc_ncm.c in th…
• CVE-2016-3952web2py before 2.14.1, when using the standalone version, all…
• CVE-2016-3953The sample web application in web2py before 2.14.2 might all…
• CVE-2016-3954web2py before 2.14.2 allows remote attackers to obtain the s…
• CVE-2016-3955The usbip_recv_xbuff function in drivers/usb/usbip/usbip_com…9.8