NetSight
IP …
high7.5

CVE-2023-28831

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infi…

Impact

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

Affected products

VendorProductAffected versions
SiemensSimatic Cloud Connect 7 Cc712 Firmware
before 2.2
SiemensSimatic Cloud Connect 7 Cc716 Firmware
before 2.2
SiemensSimatic Drive Controller Cpu 1504d Tf Firmware
before 2.2
SiemensSimatic Drive Controller Cpu 1507d Tf Firmware
before 2.9.7
SiemensSimatic Et 200sp Open Controller Cpu Firmware
before 2.9.7
SiemensSimatic S7-1200 Cpu Firmware
before 3.0.3
SiemensSimatic S7-1500 Cpu 1510sp-1 Pn Firmware
before 2.9.7
SiemensSimatic S7-1500 Cpu 1510sp F-1 Pn Firmware
before 3.0.3
SiemensSimatic S7-1500 Cpu 1511-1 Pn Firmware
before 21.9.7
SiemensSimatic S7-1500 Cpu 1511c-1 Pn Firmware
before 30.0.0
SiemensSimatic S7-1500 Cpu 1511f-1 Pn Firmware
before 2.9.7
SiemensSimatic S7-1500 Cpu 1511t-1 Pn Firmware
before 2.9.7

Weakness classification

CWE-190

References