CVE-2016-8673

A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server at port 80/TCP or port 443/TCP of the affected devices could allow remote attackers to perform actions with the permissions of an authenticated user, provided the targeted user has an active session and is induced to trigger the malicious request.

• CWE-352

• https://cert-portal.siemens.com/productcert/pdf/ssa-603476.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-603476.pdf

Published

Nov 23, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8667The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Qu…6
• CVE-2016-8668The rocker_io_writel function in hw/net/rocker/rocker.c in Q…6
• CVE-2016-8669The serial_update_parameters function in hw/char/serial.c in…6
• CVE-2016-8670Integer signedness error in the dynamicGetbuf function in gd…
• CVE-2016-8671The pstm_exptmod function in MatrixSSL 3.8.6 and earlier doe…
• CVE-2016-8672A vulnerability has been identified in SIMATIC CP 343-1 Adva…
• CVE-2016-8674The pdf_to_num function in pdf-object.c in MuPDF before 1.10…
• CVE-2016-8675The get_vlc2 function in get_bits.h in Libav before 11.9 all…
• CVE-2016-8676The get_vlc2 function in get_bits.h in Libav 11.9 allows rem…
• CVE-2016-8677The AcquireQuantumPixels function in MagickCore/quantum.c in…8.8
• CVE-2016-8678The IsPixelMonochrome function in MagickCore/pixel-accessor.…
• CVE-2016-8679The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c…6.5