Vulnerability record · CVE-2016-7960 · published 13 October 2016

CVE-2016-7960: Siemens simatic step 7 information exposure vulnerability

Siemens · Simatic Step 7

Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration information via unspecified vectors.

2.5 CVSS 3.0 Low EPSS 0.33% · top 76.0% CWE-200 · Information exposure

2.5CVSS 3.0 base score, v2 1.9

0.33%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

6References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Simatic Step 7 Siemens

References

Link	Tags
http://www.securityfocus.com/bid/93551	Third Party AdvisoryVDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf	Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03	MitigationPatchThird Party AdvisoryUS Government ResourceVDB Entry
http://www.securityfocus.com/bid/93551	Third Party AdvisoryVDB Entry
http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-869766.pdf	Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-287-03	MitigationPatchThird Party AdvisoryUS Government ResourceVDB Entry

Track CVE-2016-7960 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-25910Siemens simatic pcs 7 code injection vulnerabilityA vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All …EPSS 1.0%13 Jun 2023 8.2CVE-2020-7587Siemens opcenter execution discrete uncontrolled resource consumption vulnerabilityA vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcent…EPSS 2.5%14 Jul 2020 7.8CVE-2021-42029Siemens simatic step 7 improper access control vulnerabilityA vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5),…EPSS 0.24%12 Apr 2022 7.8CVE-2020-7586Siemens simatic pcs 7 heap-based buffer overflow vulnerabilityA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All …EPSS 0.42%10 Jun 2020 7.8CVE-2020-7585Siemens simatic pcs 7 uncontrolled search path element vulnerabilityA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All …EPSS 0.45%10 Jun 2020 6.9CVE-2015-1594Siemens starter vulnerabilityUntrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 bef…EPSS 0.40%7 Mar 2015 6.9CVE-2012-3015Siemens simatic pcs7 vulnerabilityUntrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, allows l…EPSS 0.46%26 Jul 2012 6.8CVE-2015-1601Siemens simatic step 7 vulnerabilitySiemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmi…EPSS 1.4%6 Apr 2015

Source: NIST National Vulnerability Database (record CVE-2016-7960), CISA KEV, FIRST EPSS (scores of 2026-09-30). This page is refreshed as NVD updates the record.