CVE-2023-28831
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.82%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
- CVSS 4.0
- 8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.82% probability · 55th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- siemens/simatic cloud connect 7 cc712 firmware · siemens/simatic cloud connect 7 cc716 firmware · siemens/simatic drive controller cpu 1504d tf firmware · siemens/simatic drive controller cpu 1507d tf firmware · siemens/simatic et 200sp open controller cpu firmware · siemens/simatic s7-1200 cpu firmware · siemens/simatic s7-1500 cpu 1510sp-1 pn firmware · siemens/simatic s7-1500 cpu 1510sp f-1 pn firmware · siemens/simatic s7-1500 cpu 1511-1 pn firmware · siemens/simatic s7-1500 cpu 1511c-1 pn firmware · siemens/simatic s7-1500 cpu 1511f-1 pn firmware · siemens/simatic s7-1500 cpu 1511t-1 pn firmware · siemens/simatic s7-1500 cpu 1511tf-1 pn firmware · siemens/simatic s7-1500 cpu 1512c-1 pn firmware · siemens/simatic s7-1500 cpu 1512sp-1 pn firmware · siemens/simatic s7-1500 cpu 1512sp f-1 pn firmware · siemens/simatic s7-1500 cpu 1513-1 pn firmware · siemens/simatic s7-1500 cpu 1513f-1 pn firmware · siemens/simatic s7-1500 cpu 1513r-1 pn firmware · siemens/simatic s7-1500 cpu 1514sp-2 pn firmware · +40 more
- Source
- productcert@siemens.com
References
- https://cert-portal.siemens.com/productcert/html/ssa-118850.htmlMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-711309.htmlMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdfMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-118850.htmlMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-711309.htmlMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdfMitigation, Vendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdfVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.