Threat Investigation
Tanıtım talep edin

CVE-2023-28831

Yüksek

Açıklama

Etkilenen ürünlerdeki OPC UA uygulamaları (ANSI C ve C++), sertifika doğrulaması sırasında uygulamanın sonsuz döngüye girmesine neden olabilecek bir tamsayı taşması (integer overflow) zafiyeti içermektedir. Bu durum, kimliği doğrulanmamış uzak bir saldırganın özel olarak hazırlanmış bir sertifika göndererek hizmet reddi (DoS) durumu oluşturmasına izin verebilir.

ÖnemYüksek
CVSS7.5
İstismar olasılığı—
ÜrünSiemens Simatic Cloud Connect 7 Cc712 Firmware
Yayın12 Eyl 2023
İlk görülme12 Eyl 2023
Zayıflık türüCWE-190Tamsayı taşması

Nasıl düzeltilir

Güncelleyin
  • siemens simatic_cloud_connect_7_cc712_firmware2.2 ya da sonraki bir sürüm
  • siemens simatic_cloud_connect_7_cc716_firmware2.2 ya da sonraki bir sürüm
  • siemens simatic_drive_controller_cpu_1504d_tf_firmware2.2 ya da sonraki bir sürüm
  • siemens simatic_drive_controller_cpu_1507d_tf_firmware2.9.7 ya da sonraki bir sürüm
  • siemens simatic_et_200sp_open_controller_cpu_firmware2.9.7 ya da sonraki bir sürüm
  • siemens simatic_s7-1200_cpu_firmware3.0.3 ya da sonraki bir sürüm
  • siemens simatic_s7-1500_cpu_1510sp-1_pn_firmware2.9.7 ya da sonraki bir sürüm
  • siemens simatic_s7-1500_cpu_1510sp_f-1_pn_firmware3.0.3 ya da sonraki bir sürüm
  • siemens simatic_s7-1500_cpu_1511-1_pn_firmware21.9.7 ya da sonraki bir sürüm
  • siemens simatic_s7-1500_cpu_1511c-1_pn_firmware30.0.0 ya da sonraki bir sürüm
  • siemens simatic_s7-1500_cpu_1511f-1_pn_firmware2.9.7 ya da sonraki bir sürüm
  • siemens simatic_s7-1500_cpu_1511t-1_pn_firmware2.9.7 ya da sonraki bir sürüm

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
siemens simatic_cloud_connect_7_cc712_firmwarev < 2.22.2
siemens simatic_cloud_connect_7_cc716_firmwarev < 2.22.2
siemens simatic_drive_controller_cpu_1504d_tf_firmwarev < 2.22.2
siemens simatic_drive_controller_cpu_1507d_tf_firmwarev < 2.9.72.9.7
siemens simatic_et_200sp_open_controller_cpu_firmwarev < 2.9.72.9.7
siemens simatic_s7-1200_cpu_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1510sp-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1510sp_f-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1511-1_pn_firmwarev < 21.9.721.9.7
siemens simatic_s7-1500_cpu_1511c-1_pn_firmwarev < 30.0.030.0.0
siemens simatic_s7-1500_cpu_1511f-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1511t-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1511tf-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1512c-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1512sp-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1512sp_f-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1513-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1513f-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1513r-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1514sp-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1514sp_f-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1514spt-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1514spt_f-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1515-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1515f-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1515r-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1515t-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1515tf-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516f-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516t-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1517-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1517f-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1517h-3_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1517t-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518-4_pn\/dp_firmwarev < 21.9.721.9.7
siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518hf-4_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518t-4_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_et_200pro_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_software_controller_firmwarev < 2.9.72.9.7
siemens simatic_s7-plcsim_advanced_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp_f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp_f-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp_f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp_f-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511-1_pn_t1_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511-1_pn_tx_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1513-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1513f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515f-2_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515f-2_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515f-2_pn_t2_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515r-2_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515r-2_pn_tx_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516-3_pn\/dp_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516-3_pn\/dp_tx_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516f-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516f-3_pn\/dp_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1517h-3_pn_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518-4_pn\/dp_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518f-4_pn\/dp_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518hf-4_pn_firmwarev < 3.0.33.0.3

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.