Threat Investigation
Request a demo

CVE-2023-28831

High

Description

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Simatic Cloud Connect 7 Cc712 Firmware
PublishedSep 12, 2023
First seenSep 12, 2023
Weakness typeCWE-190Integer overflow

How to fix

Update
  • siemens simatic_cloud_connect_7_cc712_firmware2.2 or later
  • siemens simatic_cloud_connect_7_cc716_firmware2.2 or later
  • siemens simatic_drive_controller_cpu_1504d_tf_firmware2.2 or later
  • siemens simatic_drive_controller_cpu_1507d_tf_firmware2.9.7 or later
  • siemens simatic_et_200sp_open_controller_cpu_firmware2.9.7 or later
  • siemens simatic_s7-1200_cpu_firmware3.0.3 or later
  • siemens simatic_s7-1500_cpu_1510sp-1_pn_firmware2.9.7 or later
  • siemens simatic_s7-1500_cpu_1510sp_f-1_pn_firmware3.0.3 or later
  • siemens simatic_s7-1500_cpu_1511-1_pn_firmware21.9.7 or later
  • siemens simatic_s7-1500_cpu_1511c-1_pn_firmware30.0.0 or later
  • siemens simatic_s7-1500_cpu_1511f-1_pn_firmware2.9.7 or later
  • siemens simatic_s7-1500_cpu_1511t-1_pn_firmware2.9.7 or later

Affected products

ProductAffected versionsFixed in
siemens simatic_cloud_connect_7_cc712_firmwarev < 2.22.2
siemens simatic_cloud_connect_7_cc716_firmwarev < 2.22.2
siemens simatic_drive_controller_cpu_1504d_tf_firmwarev < 2.22.2
siemens simatic_drive_controller_cpu_1507d_tf_firmwarev < 2.9.72.9.7
siemens simatic_et_200sp_open_controller_cpu_firmwarev < 2.9.72.9.7
siemens simatic_s7-1200_cpu_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1510sp-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1510sp_f-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1511-1_pn_firmwarev < 21.9.721.9.7
siemens simatic_s7-1500_cpu_1511c-1_pn_firmwarev < 30.0.030.0.0
siemens simatic_s7-1500_cpu_1511f-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1511t-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1511tf-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1512c-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1512sp-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1512sp_f-1_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1513-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1513f-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1513r-1_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1514sp-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1514sp_f-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1514spt-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1514spt_f-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1515-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1515f-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1515r-2_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1515t-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1515tf-2_pn_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516f-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516t-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1517-3_pn\/dp_firmwarev < 3.0.33.0.3
siemens simatic_s7-1500_cpu_1517f-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1517h-3_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1517t-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518-4_pn\/dp_firmwarev < 21.9.721.9.7
siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518hf-4_pn_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518t-4_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_et_200pro_firmwarev < 2.9.72.9.7
siemens simatic_s7-1500_software_controller_firmwarev < 2.9.72.9.7
siemens simatic_s7-plcsim_advanced_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp_f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1510sp_f-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp_f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_et_200sp_cpu_1512sp_f-1_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511-1_pn_t1_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511-1_pn_tx_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1511f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1513-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1513f-1_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515f-2_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515f-2_pn_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515f-2_pn_t2_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515r-2_pn_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1515r-2_pn_tx_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516-3_pn\/dp_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516-3_pn\/dp_tx_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516f-3_pn\/dp_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1516f-3_pn\/dp_rail_firmwarev < 2.9.72.9.7
siemens siplus_s7-1500_cpu_1517h-3_pn_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518-4_pn\/dp_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518f-4_pn\/dp_firmwarev < 3.0.33.0.3
siemens siplus_s7-1500_cpu_1518hf-4_pn_firmwarev < 3.0.33.0.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.