CVE-2016-8561

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated privileges to TIA-Portal and project data on the engineering station could possibly get privileged access on affected devices.

• CWE-264

• http://www.securityfocus.com/bid/94436Third Party Advisory, VDB Entry
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01
• http://www.securityfocus.com/bid/94436Third Party Advisory, VDB Entry
• http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-672373.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-672373.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-16-327-01

Published

Nov 18, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8555Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8556Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8557Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8558Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8559Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8560Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8562A vulnerability has been identified in SIMATIC CP 1543-1 (Al…7.5
• CVE-2016-8563Siemens Automation License Manager (ALM) before 5.3 SP3 Upda…
• CVE-2016-8564SQL injection vulnerability in Siemens Automation License Ma…
• CVE-2016-8565Siemens Automation License Manager (ALM) before 5.3 SP3 allo…
• CVE-2016-8566An issue was discovered in Siemens SICAM PAS before 8.00. Be…7.8
• CVE-2016-8567An issue was discovered in Siemens SICAM PAS before 8.00. A …9.8