Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:cp_1616_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductCp 1616 Firmware (d273cd2d-ec90-5855-8262-d707a7ceba0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13810 vulnerable 2026-06-08 05:10:51.958846 Details available
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated configuration web server of the affected CP devices could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. At the time of advisory publication no public exploitation of this vulnerability was known.
Published: 2019-04-17T13:38:34.000Z
Updated: 2024-08-05T09:14:47.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13809 vulnerable 2026-06-08 05:10:51.958272 Details available
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). The integrated web server of the affected CP devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a successful exploitation. At the time of advisory publication no public exploitation of this vulnerability was known.
Published: 2019-04-17T13:38:34.000Z
Updated: 2024-08-05T09:14:47.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13808 vulnerable 2026-06-08 05:10:51.955580 Details available
A vulnerability has been identified in CP 1604 (All versions), CP 1616 (All versions). An attacker with network access to port 23/tcp could extract internal communication data or cause a Denial-of-Service condition. Successful exploitation requires network access to a vulnerable device. At the time of advisory publication no public exploitation of this vulnerability was known.
Published: 2019-04-17T13:38:34.000Z
Updated: 2024-08-05T09:14:47.234Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.