The vulnerability of the OPC UA industrial communication standard implementation in Siemens software products, written in ANSI C programming language, relates to integer overflow. This allows a malicious actor to trigger a service failure.

🗓️ 22 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

The OPC Unified Architecture implementation in Siemens software written in C has an integer overflow vulnerability causing remote service failure.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2023-28831	12 Sep 202314:23	–	circl
CNNVD	SIMATIC Cloud Connect 输入验证错误漏洞	12 Sep 202300:00	–	cnnvd
CNVD	Siemens SIMATIC Products ANSI C OPC UA SDK Denial of Service Vulnerability	14 Sep 202300:00	–	cnvd
CVE	CVE-2023-28831	12 Sep 202309:32	–	cve
Cvelist	CVE-2023-28831	12 Sep 202309:32	–	cvelist
EUVD	EUVD-2023-32463	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC, SIPLUS Products	12 Sep 202300:00	–	ics
ICS	Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC	12 Dec 202300:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Sep 202300:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	10 Oct 202300:00	–	ncsc

Vulners

Node

siemens_ag simatic_cloud_connect_7_cc712Range<2.2

OR

siemens_ag simatic_cloud_connect_7_cc716Range<2.2

OR

siemens_ag simatic_drive_controller_cpu_1504d_tfRange<2.9.7

OR

siemens_ag simatic_drive_controller_cpu_1504d_tfRange<3.0.3

OR

siemens_ag simatic_drive_controller_cpu_1507d_tfRange<2.9.7

OR

siemens_ag simatic_drive_controller_cpu_1507d_tfRange<3.0.3

OR

siemens_ag simatic_et_200_sp_open_controller_cpu_1515sp_pc2Range<21.9.7

OR

siemens_ag simatic_et_200_sp_open_controller_cpu_1515sp_pc2Range30.0.0≥

OR

siemens_ag simatic_s7-1500_cpu_1510sp_f-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1510sp_f-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1510sp-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1510sp-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1511-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1511-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1511c-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1511f-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1511f-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1511t-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1511t-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1511tf-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1511tf-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1512c-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1512sp_f-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1512sp_f-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1512sp-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1512sp-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1513-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1513-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1513f-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1513f-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1513r-1_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1513r-1_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1514sp_f-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1514sp-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1514spt_f-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1514spt-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1515-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1515-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1515f-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1515f-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1515r-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1515r-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1515t-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1515t-2_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1515tf-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1516-3_pn/dpRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1516-3_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1516f-3_pn/dpRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1516f-3_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1516t-3_pn/dpRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_1516t-3_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1517-3_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1517f-3_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1517h-3_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1517t-3Range<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1517tf-3_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518-4_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518-4_pn/dp_mfpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518f-4_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518f-4_pn/dp_mfpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518hf-4_pnRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518t-4_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_1518tf-4_pn/dpRange<3.0.3

OR

siemens_ag simatic_s7-1500_cpu_s7-1518-4_pn/dp_odkRange<2.9.7

OR

siemens_ag simatic_s7-1500_cpu_s7-1518f-4_pn/dp_mfpRange<2.9.7

OR

siemens_ag simatic_s7-1500_et_200pro:_cpu_1513pro_f-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_et_200pro:_cpu_1513pro-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_et_200pro:_cpu_1516pro_f-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_et_200pro:_cpu_1516pro-2_pnRange<2.9.7

OR

siemens_ag simatic_s7-1500_software_controller_v2Range<21.9.7

OR

siemens_ag siplus_et_200sp_cpu_1510sp_f-1_pnRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1510sp_f-1_pn_railRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1510sp-1_pnRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1510sp-1_pn_railRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1512sp_f-1_pnRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1512sp_f-1_pn_railRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1512sp-1_pnRange<2.9.7

OR

siemens_ag siplus_et_200sp_cpu_1512sp-1_pn_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1511-1_pnRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1511-1_pn_t1_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1511-1_pn_tx_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1511f-1_pnRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1513-1_pnRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1513f-1_pnRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1515f-2_pnRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1515f-2_pn_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1515f-2_pn_t2_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1515r-2_pnRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1515r-2_pn_tx_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1516-3_pn/dpRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1516-3_pn/dp_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1516-3_pn/dp_tx_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1516f-3_pn/dpRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1516f-3_pn/dp_railRange<2.9.7

OR

siemens_ag siplus_s7-1500_cpu_1517h-3_pnRange<3.0.3

OR

siemens_ag siplus_s7-1500_cpu_1518-4_pn/dpRange<3.0.3

OR

siemens_ag siplus_s7-1500_cpu_1518-4_pn/dp_mfpRange<3.0.3

OR

siemens_ag siplus_s7-1500_cpu_1518f-4_pn/dpRange<3.0.3

OR

siemens_ag siplus_s7-1500_cpu_1518hf-4_pnRange<3.0.3

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-711309.pdf
web	www.web.nvd.nist.gov/view/vuln/detail

22 Sep 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 37.5

CVSS 27.8

EPSS0.00819

OPC Unified Architecture Siemens software C language integer overflow remote failure