CVE-2023-28831

Description

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

Category

7.5
CVSS
Severity: High
CVSS 3.1 •
EPSS 0.54%
Vendor Advisory siemens.com Vendor Advisory siemens.com Vendor Advisory siemens.com Vendor Advisory siemens.com
Affected: Siemens SIMATIC BRAUMAT
Affected: Siemens SIMATIC Cloud Connect 7 CC712
Affected: Siemens SIMATIC Cloud Connect 7 CC716
Affected: Siemens SIMATIC Comfort/Mobile RT
Affected: Siemens SIMATIC Drive Controller CPU 1504D TF
Affected: Siemens SIMATIC Drive Controller CPU 1504D TF
Affected: Siemens SIMATIC Drive Controller CPU 1507D TF
Affected: Siemens SIMATIC Drive Controller CPU 1507D TF
Affected: Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Affected: Siemens SIMATIC IPC DiagMonitor
Affected: Siemens SIMATIC NET PC Software V14
Affected: Siemens SIMATIC NET PC Software V16
Affected: Siemens SIMATIC NET PC Software V17
Affected: Siemens SIMATIC NET PC Software V18
Affected: Siemens SIMATIC PCS 7 V9.1
Affected: Siemens SIMATIC PCS neo V4.0
Affected: Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1510SP-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1510SP-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511C-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511C-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511T-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511T-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1512C-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1512C-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1512SP-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1512SP-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1513-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1513-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1513-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1513F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1513F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1513F-1 PN
Affected: Siemens SIMATIC S7-1500 CPU 1514SP F-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1514SP-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1514SPT F-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1514SPT-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515F-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515F-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515F-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515T-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515T-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
Affected: Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Affected: Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Affected: Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP
Affected: Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK
Affected: Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK
Affected: Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN
Affected: Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN
Affected: Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN
Affected: Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN
Affected: Siemens SIMATIC S7-1500 Software Controller V2
Affected: Siemens SIMATIC S7-1500 Software Controller V3
Affected: Siemens SIMATIC S7-PLCSIM Advanced
Affected: Siemens SIMATIC SISTAR
Affected: Siemens SIMATIC WinCC OA V3.17
Affected: Siemens SIMATIC WinCC OA V3.18
Affected: Siemens SIMATIC WinCC OA V3.19
Affected: Siemens SIMATIC WinCC OPC UA Client
Affected: Siemens SIMATIC WinCC Runtime Professional V16
Affected: Siemens SIMATIC WinCC Runtime Professional V17
Affected: Siemens SIMATIC WinCC Runtime Professional V18
Affected: Siemens SIMATIC WinCC Runtime Professional V19
Affected: Siemens SIMATIC WinCC Unified OPC UA Server
Affected: Siemens SIMATIC WinCC V7.4
Affected: Siemens SIMATIC WinCC V7.5
Affected: Siemens SIMATIC WinCC V8.0
Affected: Siemens SINUMERIK MC
Affected: Siemens SINUMERIK ONE
Affected: Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL
Affected: Siemens SIPLUS ET 200SP CPU 1510SP-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1510SP-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL
Affected: Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL
Affected: Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL
Affected: Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL
Affected: Siemens SIPLUS ET 200SP CPU 1512SP-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1512SP-1 PN
Affected: Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL
Affected: Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1511F-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1511F-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1513-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1513-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1513-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1513-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1513F-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1513F-1 PN
Affected: Siemens SIPLUS S7-1500 CPU 1515F-2 PN
Affected: Siemens SIPLUS S7-1500 CPU 1515F-2 PN
Affected: Siemens SIPLUS S7-1500 CPU 1515F-2 PN RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL
Affected: Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP
Affected: Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Affected: Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP
Published at:
Updated at:

References

Link Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdf vendor advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdf mitigation vendor advisory
https://cert-portal.siemens.com/productcert/html/ssa-711309.html mitigation vendor advisory
https://cert-portal.siemens.com/productcert/html/ssa-118850.html mitigation vendor advisory

Frequently Asked Questions

What is the severity of CVE-2023-28831?
CVE-2023-28831 has been scored as a high severity vulnerability.
How to fix CVE-2023-28831?
To fix CVE-2023-28831, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-28831 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2023-28831 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-28831?
CVE-2023-28831 affects Siemens SIMATIC BRAUMAT, Siemens SIMATIC Cloud Connect 7 CC712, Siemens SIMATIC Cloud Connect 7 CC716, Siemens SIMATIC Comfort/Mobile RT, Siemens SIMATIC Drive Controller CPU 1504D TF, Siemens SIMATIC Drive Controller CPU 1504D TF, Siemens SIMATIC Drive Controller CPU 1507D TF, Siemens SIMATIC Drive Controller CPU 1507D TF, Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), Siemens SIMATIC IPC DiagMonitor, Siemens SIMATIC NET PC Software V14, Siemens SIMATIC NET PC Software V16, Siemens SIMATIC NET PC Software V17, Siemens SIMATIC NET PC Software V18, Siemens SIMATIC PCS 7 V9.1, Siemens SIMATIC PCS neo V4.0, Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN, Siemens SIMATIC S7-1500 CPU 1510SP F-1 PN, Siemens SIMATIC S7-1500 CPU 1510SP-1 PN, Siemens SIMATIC S7-1500 CPU 1510SP-1 PN, Siemens SIMATIC S7-1500 CPU 1511-1 PN, Siemens SIMATIC S7-1500 CPU 1511-1 PN, Siemens SIMATIC S7-1500 CPU 1511-1 PN, Siemens SIMATIC S7-1500 CPU 1511C-1 PN, Siemens SIMATIC S7-1500 CPU 1511C-1 PN, Siemens SIMATIC S7-1500 CPU 1511F-1 PN, Siemens SIMATIC S7-1500 CPU 1511F-1 PN, Siemens SIMATIC S7-1500 CPU 1511F-1 PN, Siemens SIMATIC S7-1500 CPU 1511T-1 PN, Siemens SIMATIC S7-1500 CPU 1511T-1 PN, Siemens SIMATIC S7-1500 CPU 1511TF-1 PN, Siemens SIMATIC S7-1500 CPU 1511TF-1 PN, Siemens SIMATIC S7-1500 CPU 1512C-1 PN, Siemens SIMATIC S7-1500 CPU 1512C-1 PN, Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN, Siemens SIMATIC S7-1500 CPU 1512SP F-1 PN, Siemens SIMATIC S7-1500 CPU 1512SP-1 PN, Siemens SIMATIC S7-1500 CPU 1512SP-1 PN, Siemens SIMATIC S7-1500 CPU 1513-1 PN, Siemens SIMATIC S7-1500 CPU 1513-1 PN, Siemens SIMATIC S7-1500 CPU 1513-1 PN, Siemens SIMATIC S7-1500 CPU 1513F-1 PN, Siemens SIMATIC S7-1500 CPU 1513F-1 PN, Siemens SIMATIC S7-1500 CPU 1513F-1 PN, Siemens SIMATIC S7-1500 CPU 1514SP F-2 PN, Siemens SIMATIC S7-1500 CPU 1514SP-2 PN, Siemens SIMATIC S7-1500 CPU 1514SPT F-2 PN, Siemens SIMATIC S7-1500 CPU 1514SPT-2 PN, Siemens SIMATIC S7-1500 CPU 1515-2 PN, Siemens SIMATIC S7-1500 CPU 1515-2 PN, Siemens SIMATIC S7-1500 CPU 1515-2 PN, Siemens SIMATIC S7-1500 CPU 1515F-2 PN, Siemens SIMATIC S7-1500 CPU 1515F-2 PN, Siemens SIMATIC S7-1500 CPU 1515F-2 PN, Siemens SIMATIC S7-1500 CPU 1515T-2 PN, Siemens SIMATIC S7-1500 CPU 1515T-2 PN, Siemens SIMATIC S7-1500 CPU 1515TF-2 PN, Siemens SIMATIC S7-1500 CPU 1515TF-2 PN, Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP, Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP, Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK, Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK, Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN, Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN, Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN, Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN, Siemens SIMATIC S7-1500 Software Controller V2, Siemens SIMATIC S7-1500 Software Controller V3, Siemens SIMATIC S7-PLCSIM Advanced, Siemens SIMATIC SISTAR, Siemens SIMATIC WinCC OA V3.17, Siemens SIMATIC WinCC OA V3.18, Siemens SIMATIC WinCC OA V3.19, Siemens SIMATIC WinCC OPC UA Client, Siemens SIMATIC WinCC Runtime Professional V16, Siemens SIMATIC WinCC Runtime Professional V17, Siemens SIMATIC WinCC Runtime Professional V18, Siemens SIMATIC WinCC Runtime Professional V19, Siemens SIMATIC WinCC Unified OPC UA Server, Siemens SIMATIC WinCC V7.4, Siemens SIMATIC WinCC V7.5, Siemens SIMATIC WinCC V8.0, Siemens SINUMERIK MC, Siemens SINUMERIK ONE, Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN, Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL, Siemens SIPLUS ET 200SP CPU 1510SP-1 PN, Siemens SIPLUS ET 200SP CPU 1510SP-1 PN, Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL, Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL, Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN, Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN, Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL, Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL, Siemens SIPLUS ET 200SP CPU 1512SP-1 PN, Siemens SIPLUS ET 200SP CPU 1512SP-1 PN, Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL, Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL, Siemens SIPLUS S7-1500 CPU 1511-1 PN, Siemens SIPLUS S7-1500 CPU 1511-1 PN, Siemens SIPLUS S7-1500 CPU 1511-1 PN, Siemens SIPLUS S7-1500 CPU 1511-1 PN, Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL, Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL, Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL, Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL, Siemens SIPLUS S7-1500 CPU 1511F-1 PN, Siemens SIPLUS S7-1500 CPU 1511F-1 PN, Siemens SIPLUS S7-1500 CPU 1513-1 PN, Siemens SIPLUS S7-1500 CPU 1513-1 PN, Siemens SIPLUS S7-1500 CPU 1513-1 PN, Siemens SIPLUS S7-1500 CPU 1513-1 PN, Siemens SIPLUS S7-1500 CPU 1513F-1 PN, Siemens SIPLUS S7-1500 CPU 1513F-1 PN, Siemens SIPLUS S7-1500 CPU 1515F-2 PN, Siemens SIPLUS S7-1500 CPU 1515F-2 PN, Siemens SIPLUS S7-1500 CPU 1515F-2 PN RAIL, Siemens SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL, Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP, Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP, Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP, Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP, Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL, Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL, Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP, Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP, Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL, Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.