High severity8.1NVD Advisory· Published Dec 17, 2016· Updated Jun 17, 2026

CVE-2016-9160

Description

A vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) could allow a remote attacker to crash an ActiveX component or leak parts of the application memory if a user is tricked into clicking on a malicious link under certain conditions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Simatic Pcs72 versions
cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*range: <=8.0
- (no CPE)range: < V8.0 SP1
Siemens Foundation/Wincc
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*
Range: <=7.1
Siemens Foundation/Simatic Wincc Oallm-fuzzy
Range: < V7.2

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/94825nvd
www.securitytracker.com/id/1037435nvd
www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-693129.pdfnvd
ics-cert.us-cert.gov/advisories/ICSA-16-348-04nvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000