HIGH
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation
Published Sep 12, 2023
8.7
HIGHCVSS 4.0
EPSS 1.13%
Description
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Affected products
-
- Version 0StatusaffectedConstraints<V8.1 SP1
- Version
-
- Version 0StatusaffectedConstraints<V2.2
- Version
-
- Version 0StatusaffectedConstraints<V2.2
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version V3.0.1StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version V3.0.1StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
- Vendor Siemens Product SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Defaultn/a
- Version 0StatusaffectedConstraints<V21.9.7
- Version V30.0.0StatusaffectedConstraints<V30.1.0
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<V16 Update 8
- Version
-
- Version 0StatusaffectedConstraints<V17 SP1 Update 1
- Version
-
- Version 0StatusaffectedConstraints<V18 Update 1
- Version
-
- Version 0StatusaffectedConstraints<V9.1 SP2 UC08
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V21.9.7
- Version
-
- Version 0StatusaffectedConstraints<V30.1.0
- Version
-
- Version 0StatusaffectedConstraints<V5.0 Update 2
- Version
-
- Version 0StatusaffectedConstraints<V8.1 SP1
- Version
-
- Version 0StatusaffectedConstraints<V3.17 P029
- Version
-
- Version 0StatusaffectedConstraints<V3.18 P019
- Version
-
- Version 0StatusaffectedConstraints<V3.19 P005
- Version
-
- Version 0StatusaffectedConstraints<V2.0.0.1
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<V19 Update 2
- Version
-
- Version 0StatusaffectedConstraints<V5.0.0.0
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<V7.5 SP2 Update 20
- Version
-
- Version 0StatusaffectedConstraints<V8.0 Update 5
- Version
-
- Version 0StatusaffectedConstraints<V1.22
- Version
-
- Version 0StatusaffectedConstraints<V6.22
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V2.9.7
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
-
- Version 0StatusaffectedConstraints<V3.0.3
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Siemens | Simatic Braumat | n/a |
| |||||||||
| Siemens | SIMATIC Cloud Connect 7 CC712 | n/a |
| |||||||||
| Siemens | SIMATIC Cloud Connect 7 CC716 | n/a |
| |||||||||
| Siemens | SIMATIC Comfort/Mobile RT | n/a |
| |||||||||
| Siemens | SIMATIC Drive Controller CPU 1504D TF | n/a |
| |||||||||
| Siemens | SIMATIC Drive Controller CPU 1507D TF | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1510sp F-1 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1510sp-1 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1512sp F-1 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1512sp-1 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1514sp F-2 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1514sp-2 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1514spt F-2 PN | n/a |
| |||||||||
| Siemens | Simatic ET 200sp Cpu 1514spt-2 PN | n/a |
| |||||||||
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | n/a |
| |||||||||
| Siemens | SIMATIC IPC DiagMonitor | n/a |
| |||||||||
| Siemens | SIMATIC NET PC Software V14 | n/a |
| |||||||||
| Siemens | SIMATIC NET PC Software V16 | n/a |
| |||||||||
| Siemens | SIMATIC NET PC Software V17 | n/a |
| |||||||||
| Siemens | SIMATIC NET PC Software V18 | n/a |
| |||||||||
| Siemens | Simatic Pcs 7 V9.1 | n/a |
| |||||||||
| Siemens | SIMATIC PCS neo V4.0 | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1511-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1511c-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1511f-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1511t-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1511tf-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1512c-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1513-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1513f-1 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1515-2 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1515f-2 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1515t-2 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1515tf-2 PN | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1516-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1516f-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1516t-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1516tf-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1517-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1517f-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1517t-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1517tf-3 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1518-4 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1518-4 Pn/dp Mfp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1518f-4 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1518t-4 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu 1518tf-4 Pn/dp | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu S7-1518-4 Pn/dp Odk | n/a |
| |||||||||
| Siemens | Simatic S7-1500 Cpu S7-1518f-4 Pn/dp Odk | n/a |
| |||||||||
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN | n/a |
| |||||||||
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN | n/a |
| |||||||||
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN | n/a |
| |||||||||
| Siemens | SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN | n/a |
| |||||||||
| Siemens | SIMATIC S7-1500 Software Controller V2 | n/a |
| |||||||||
| Siemens | SIMATIC S7-1500 Software Controller V3 | n/a |
| |||||||||
| Siemens | SIMATIC S7-PLCSIM Advanced | n/a |
| |||||||||
| Siemens | Simatic Sistar | n/a |
| |||||||||
| Siemens | SIMATIC WinCC OA V3.17 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC OA V3.18 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC OA V3.19 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC OPC UA Client | n/a |
| |||||||||
| Siemens | SIMATIC WinCC Runtime Professional V16 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC Runtime Professional V17 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC Runtime Professional V18 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC Runtime Professional V19 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC Unified OPC UA Server | n/a |
| |||||||||
| Siemens | SIMATIC WinCC V7.4 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC V7.5 | n/a |
| |||||||||
| Siemens | SIMATIC WinCC V8.0 | n/a |
| |||||||||
| Siemens | Sinumerik MC | n/a |
| |||||||||
| Siemens | Sinumerik One | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1510sp F-1 PN | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1510sp F-1 PN Rail | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1510sp-1 PN | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1510sp-1 PN Rail | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1512sp F-1 PN | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1512sp F-1 PN Rail | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1512sp-1 PN | n/a |
| |||||||||
| Siemens | Siplus ET 200sp Cpu 1512sp-1 PN Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1511-1 PN | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1511-1 PN T1 Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1511-1 PN TX Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1511f-1 PN | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1513-1 PN | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1513f-1 PN | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1515f-2 PN | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1515f-2 PN Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1515f-2 PN T2 Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1516-3 Pn/dp | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1516-3 Pn/dp Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1516-3 Pn/dp TX Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1516f-3 Pn/dp | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1516f-3 Pn/dp Rail | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1518-4 Pn/dp | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1518-4 Pn/dp Mfp | n/a |
| |||||||||
| Siemens | Siplus S7-1500 Cpu 1518f-4 Pn/dp | n/a |
|
Configuration 1
AND
- < 2.2
Running on/with
- n/a
Configuration 2
AND
- < 2.2
Running on/with
- n/a
Configuration 3
AND
Running on/with
- n/a
Configuration 4
AND
- < 2.9.7
Running on/with
- n/a
Configuration 5
AND
- < 2.9.7
Running on/with
- n/a
Configuration 6
AND
- < 3.0.3
Running on/with
- n/a
Configuration 7
AND
- < 2.9.7
Running on/with
- n/a
Configuration 8
AND
- < 3.0.3
Running on/with
- n/a
Configuration 9
AND
- < 21.9.7
Running on/with
- n/a
Configuration 10
AND
- < 30.0.0
Running on/with
- n/a
Configuration 11
AND
- < 2.9.7
Running on/with
- n/a
Configuration 12
AND
- < 2.9.7
Running on/with
- n/a
Configuration 13
AND
- < 3.0.3
Running on/with
- n/a
Configuration 14
AND
- < 3.0.3
Running on/with
- n/a
Configuration 15
AND
- < 2.9.7
Running on/with
- n/a
Configuration 16
AND
- < 3.0.3
Running on/with
- n/a
Configuration 17
AND
- < 2.9.7
Running on/with
- n/a
Configuration 18
AND
- < 2.9.7
Running on/with
- n/a
Configuration 19
AND
- < 2.9.7
Running on/with
- n/a
Configuration 20
AND
- < 3.0.3
Running on/with
- n/a
Configuration 21
AND
- < 2.9.7
Running on/with
- n/a
Configuration 22
AND
- < 2.9.7
Running on/with
- n/a
Configuration 23
AND
- < 2.9.7
Running on/with
- n/a
Configuration 24
AND
- < 2.9.7
Running on/with
- n/a
Configuration 25
AND
- < 3.0.3
Running on/with
- n/a
Configuration 26
AND
- < 2.9.7
Running on/with
- n/a
Configuration 27
AND
- < 3.0.3
Running on/with
- n/a
Configuration 28
AND
- < 3.0.3
Running on/with
- n/a
Configuration 29
AND
- < 3.0.3
Running on/with
- n/a
Configuration 30
AND
- < 3.0.3
Running on/with
- n/a
Configuration 31
AND
- < 3.0.3
Running on/with
- n/a
Configuration 32
AND
- < 3.0.3
Running on/with
- n/a
Configuration 33
AND
- < 3.0.3
Running on/with
- n/a
Configuration 34
AND
- < 2.9.7
Running on/with
- n/a
Configuration 35
AND
- < 2.9.7
Running on/with
- n/a
Configuration 36
AND
- < 2.9.7
Running on/with
- n/a
Configuration 37
AND
- < 2.9.7
Running on/with
- n/a
Configuration 38
AND
- < 21.9.7
Running on/with
- n/a
Configuration 39
AND
- < 2.9.7
Running on/with
- n/a
Configuration 40
AND
- < 2.9.7
Running on/with
- n/a
Configuration 41
AND
- < 2.9.7
Running on/with
- n/a
Configuration 42
AND
- < 2.9.7
Running on/with
- n/a
Configuration 43
AND
- < 2.9.7
Running on/with
- n/a
Configuration 44
AND
- < 2.9.7
Running on/with
- n/a
Configuration 45
AND
- < 2.9.7
Running on/with
- n/a
Configuration 46
AND
Running on/with
- n/a
Configuration 47
AND
- < 2.9.7
Running on/with
- n/a
Configuration 48
AND
- < 2.9.7
Running on/with
- v2
Configuration 49
AND
- < 2.9.7
Running on/with
- v3
Configuration 50
AND
- < 2.9.7
Running on/with
- n/a
Configuration 51
AND
- < 2.9.7
Running on/with
- n/a
Configuration 52
AND
- < 2.9.7
Running on/with
- n/a
Configuration 53
AND
- < 2.9.7
Running on/with
- n/a
Configuration 54
AND
- < 2.9.7
Running on/with
- n/a
Configuration 55
AND
- < 2.9.7
Running on/with
- n/a
Configuration 56
AND
- < 2.9.7
Running on/with
- n/a
Configuration 57
AND
- < 2.9.7
Running on/with
- n/a
Configuration 58
AND
- < 2.9.7
Running on/with
- n/a
Configuration 59
AND
- < 2.9.7
Running on/with
- n/a
Configuration 60
AND
- < 2.9.7
Running on/with
- n/a
Configuration 61
AND
- < 2.9.7
Running on/with
- n/a
Configuration 62
AND
- < 2.9.7
Running on/with
- n/a
Configuration 63
AND
- < 2.9.7
Running on/with
- n/a
Configuration 64
AND
- < 2.9.7
Running on/with
- n/a
Configuration 65
AND
- < 2.9.7
Running on/with
- n/a
Configuration 66
AND
- < 2.9.7
Running on/with
- n/a
Configuration 67
AND
- < 2.9.7
Running on/with
- n/a
Configuration 68
AND
- < 2.9.7
Running on/with
- n/a
Configuration 69
AND
- < 2.9.7
Running on/with
- n/a
Configuration 70
AND
- < 2.9.7
Running on/with
- n/a
Configuration 71
AND
- < 2.9.7
Running on/with
- n/a
Configuration 72
AND
- < 2.9.7
Running on/with
- n/a
Configuration 73
AND
- < 2.9.7
Running on/with
- n/a
Configuration 74
AND
- < 2.9.7
Running on/with
- n/a
Configuration 75
AND
- < 3.0.3
Running on/with
- n/a
Configuration 76
AND
- < 3.0.3
Running on/with
- n/a
Configuration 77
AND
- < 3.0.3
Running on/with
- n/a
Configuration 78
AND
- < 3.0.3
Running on/with
- n/a
Configuration 79
AND
- < 3.0.3
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
8.7 HIGH CVE.org
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Attack Vector Network
Attack Complexity Low
Attack Requirements None
Privileges Required None
User Interaction None
Vulnerable System Confidentiality None
Vulnerable System Integrity None
Vulnerable System Availability High
Subsequent System Confidentiality None
Subsequent System Integrity None
Subsequent System Availability None
1 other source (NVD) ▾
8.7 HIGH NVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Attack Requirements None
Privileges Required None
User Interaction None
Vulnerable System Confidentiality None
Vulnerable System Integrity None
Vulnerable System Availability High
Subsequent System Confidentiality None
Subsequent System Integrity None
Subsequent System Availability None
Exploit Maturity n/a
Confidentiality Requirement n/a
Integrity Requirement n/a
Availability Requirement n/a
Scope n/a
7.5 HIGH NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
PartialDecision
n/aAssessed Jun 25, 2025 · SSVC 2.0.3
1.13% 0.01129
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.01129
Score over time
2023–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (8 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 1.13% (0.01129) | 65.17th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.82% (0.00819) | 52.25th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.23% (0.00228) | 43.60th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.22% (0.00221) | 61.21th | v3 (v2023.03.01) |
| Apr 30, 2024 | 0.13% (0.00132) | 47.56th | v3 (v2023.03.01) |
| Feb 14, 2024 | 0.16% (0.00157) | 50.90th | v3 (v2023.03.01) |
| Sep 21, 2023 | 0.08% (0.00081) | 33.85th | v3 (v2023.03.01) |
| Sep 13, 2023 | 0.09% (0.00086) | 35.41th | v3 (v2023.03.01) |
Weaknesses (1)
References (4)
- https://cert-portal.siemens.com/productcert/html/ssa-118850.html MitigationVendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-711309.html MitigationVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdf MitigationVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdf Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-118850.html | MitigationVendor Advisory | |
| https://cert-portal.siemens.com/productcert/html/ssa-711309.html | MitigationVendor Advisory | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdf | MitigationVendor Advisory | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdf | Vendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner siemens
Published Sep 12, 2023
Updated Nov 11, 2025
Reserved Mar 24, 2023
Link CVE-2023-28831
CISA Vulnrichment
Updated Jun 25, 2025