High

DATE	CVE	VULNERABILITY TITLE	RISK
2016-12-17	CVE-2016-9158	Improper Input Validation vulnerability in Siemens products A vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300 CPU family (incl. network low complexity siemens CWE-20	7.5
2016-11-23	CVE-2016-8673	Cross-Site Request Forgery (CSRF) vulnerability in Siemens products A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. network low complexity siemens CWE-352	8.8