SSA-711309

csafDEsiemens_psirt

SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products

view advisory published 2023-09-12

The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-28831UShigh7.5—
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during cert…
02

references

External citations — patches, advisories, analysis.

03

remediations (286)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan