Log in Start free

Vulnerability · Published Sep 12, 2023 · Assigned by siemens

CVE-2023-28831

High 7.5

In plain English

A high-severity integer overflow in SIMATIC BRAUMAT from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 33.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

Affected products (as reported)

VendorProductVersions
Siemens SIMATIC BRAUMAT 0 – before V8.1 SP1
Siemens SIMATIC Cloud Connect 7 CC712 0 – before V2.2
Siemens SIMATIC Cloud Connect 7 CC716 0 – before V2.2
Siemens SIMATIC Comfort/Mobile RT 0 – before *
Siemens SIMATIC Drive Controller CPU 1504D TF 0 – before V2.9.7
Siemens SIMATIC Drive Controller CPU 1504D TF V3.0.1 – before V3.0.3
Siemens SIMATIC Drive Controller CPU 1507D TF 0 – before V2.9.7
Siemens SIMATIC Drive Controller CPU 1507D TF V3.0.1 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0 – before V2.9.7
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0 – before V2.9.7
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0 – before V2.9.7
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0 – before V2.9.7
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1514SP-2 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN 0 – before V3.0.3
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) 0 – before V21.9.7
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V30.0.0 – before V30.1.0
Siemens SIMATIC IPC DiagMonitor 0 – before *
Siemens SIMATIC NET PC Software V14 0 – before *
Siemens SIMATIC NET PC Software V16 0 – before V16 Update 8
Siemens SIMATIC NET PC Software V17 0 – before V17 SP1 Update 1
Siemens SIMATIC NET PC Software V18 0 – before V18 Update 1
Siemens SIMATIC PCS 7 V9.1 0 – before V9.1 SP2 UC08
Siemens SIMATIC PCS neo V4.0 0 – before *
Siemens SIMATIC S7-1500 CPU 1511-1 PN 0 – before V2.9.7

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References