CVE-2023-28831 json
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application…
published 2023-09-12 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-32463
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 66%
- public exploits
- 0
- none known
Summary
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.
This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Patch / fix
- Siemens SIMATIC BRAUMAT V8.1 SP1
- Siemens SIMATIC Cloud Connect 7 CC712 V2.2
- Siemens SIMATIC Cloud Connect 7 CC716 V2.2
- Siemens SIMATIC Drive Controller CPU 1504D TF V2.9.7, V3.0.3
- Siemens SIMATIC Drive Controller CPU 1507D TF V2.9.7, V3.0.3
- Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC ET 200SP CPU 1510SP-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC ET 200SP CPU 1512SP-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SP-2 PN V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN V3.0.3
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V21.9.7, V30.1.0
- Siemens SIMATIC NET PC Software V16 V16 Update 8
- Siemens SIMATIC NET PC Software V17 V17 SP1 Update 1
- Siemens SIMATIC NET PC Software V18 V18 Update 1
- Siemens SIMATIC PCS 7 V9.1 V9.1 SP2 UC08
- Siemens SIMATIC S7-1500 CPU 1511-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1511C-1 PN V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511F-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1511T-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1511TF-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1512C-1 PN V2.9.7
- Siemens SIMATIC S7-1500 CPU 1513-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1513F-1 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515-2 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515F-2 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515T-2 PN V2.9.7, V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515TF-2 PN V2.9.7, V3.0.3
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-23-257-01 updated cvss 7.5
Siemens SIMATIC, SIPLUS Products
-
Siemens SIMATIC BRAUMAT <V8.1_SP1affected: fixed in V8.1, mitigation support.industry.siemens.com
-
Siemens SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00) < 2.2 Siemens SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00) < 2.2affected: fixed in V2.2, mitigation support.industry.siemens.com
-
Siemens SIMATIC Comfort/Mobile RTaffected: mitigation, no fix planned
-
Siemens SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) < 2.9.7, >= 3.0.1, < 3.0.3 Siemens SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) < 2.9.7, >= 3.0.1, < 3.0.3affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
show 20 moreshow fewer
-
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) < 3.0.3 Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) < 3.0.3 Siemens SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) < 3.0.3 Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) < 3.0.3 Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) < 21.9.7, >= 30.0.0, < 30.1.0affected: fixed in V21.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC IPC DiagMonitor Siemens SIMATIC NET PC Software V14affected: mitigation, no fix planned
-
Siemens SIMATIC NET PC Software V16 <V16_Update_8affected: fixed in V16, mitigation support.industry.siemens.com
-
Siemens SIMATIC NET PC Software V17 <V17_SP1_Update_1affected: fixed in V17, mitigation support.industry.siemens.com
-
Siemens SIMATIC NET PC Software V18 <V18_Update_1affected: fixed in V18, mitigation support.industry.siemens.com
-
Siemens SIMATIC PCS 7 V9.1 <V9.1_SP2_UC08affected: fixed in V9.1, mitigation support.industry.siemens.com
-
Siemens SIMATIC PCS neo V4.0affected: mitigation, no fix planned
-
Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) < 2.9.7 Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) < 2.9.7 Siemens SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) < 2.9.7 Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) < 2.9.7 Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) < 3.0.3affected: fixed in V3.0.3, mitigation support.industry.siemens.com
-
Siemens SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) < 2.9.7 Siemens SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) < 2.9.7affected: fixed in V2.9.7, mitigation support.industry.siemens.com
103 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-23-348-06 updated cvss 7.5
Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC
-
Siemens SINUMERIK MC <V1.22affected: fixed in V1.22, mitigation support.industry.siemens.com
-
Siemens SINUMERIK ONE <V6.22affected: fixed in V6.22, mitigation support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 16 mo ago
Exploit prediction
1.13% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| CNA | 4.0 | 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Siemens SIMATIC BRAUMAT
- Siemens SIMATIC Cloud Connect 7 CC712
- Siemens SIMATIC Cloud Connect 7 CC716
- Siemens SIMATIC Comfort/Mobile RT
- Siemens SIMATIC Drive Controller CPU 1504D TF
- Siemens SIMATIC Drive Controller CPU 1507D TF
- Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN
- Siemens SIMATIC ET 200SP CPU 1510SP-1 PN
- Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN
- Siemens SIMATIC ET 200SP CPU 1512SP-1 PN
- Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN
- Siemens SIMATIC ET 200SP CPU 1514SP-2 PN
- Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN
- Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
- Siemens SIMATIC IPC DiagMonitor
- Siemens SIMATIC NET PC Software V14
- Siemens SIMATIC NET PC Software V16
- Siemens SIMATIC NET PC Software V17
- Siemens SIMATIC NET PC Software V18
- Siemens SIMATIC PCS 7 V9.1
- Siemens SIMATIC PCS neo V4.0
- Siemens SIMATIC S7-1500 CPU 1511-1 PN
- Siemens SIMATIC S7-1500 CPU 1511C-1 PN
- Siemens SIMATIC S7-1500 CPU 1511F-1 PN
- Siemens SIMATIC S7-1500 CPU 1511T-1 PN
- Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
- Siemens SIMATIC S7-1500 CPU 1512C-1 PN
- Siemens SIMATIC S7-1500 CPU 1513-1 PN
- Siemens SIMATIC S7-1500 CPU 1513F-1 PN
- Siemens SIMATIC S7-1500 CPU 1515-2 PN
- Siemens SIMATIC S7-1500 CPU 1515F-2 PN
- Siemens SIMATIC S7-1500 CPU 1515T-2 PN
- Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
- Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
- Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP
- Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP
- Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK
- Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK
Classification
- Weakness
-
- CWE-190 Integer Overflow or Wraparound
References
-
cert-portal.siemens.com
/productcert/pdf/ssa-711309.pdf
vendor-advisory
-
cert-portal.siemens.com
/productcert/pdf/ssa-118850.pdf
mitigation, vendor-advisory
-
cert-portal.siemens.com
/productcert/html/ssa-711309.html
mitigation, vendor-advisory
-
cert-portal.siemens.com
/productcert/html/ssa-118850.html
mitigation, vendor-advisory
Sources
- CVE List CVE-2023-28831
- NVD CVE-2023-28831
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.