CVE-2023-28831

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
SiemensSIMATIC BRAUMAT< V8.1 SP1
SiemensSIMATIC Cloud Connect 7 CC712< V2.2
SiemensSIMATIC Cloud Connect 7 CC716< V2.2
SiemensSIMATIC Comfort/Mobile RT< *
SiemensSIMATIC Drive Controller CPU 1504D TF< V2.9.7
SiemensSIMATIC Drive Controller CPU 1504D TF>= V3.0.1, < V3.0.3
SiemensSIMATIC Drive Controller CPU 1507D TF< V2.9.7
SiemensSIMATIC Drive Controller CPU 1507D TF>= V3.0.1, < V3.0.3
SiemensSIMATIC ET 200SP CPU 1510SP F-1 PN< V2.9.7
SiemensSIMATIC ET 200SP CPU 1510SP F-1 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1510SP-1 PN< V2.9.7
SiemensSIMATIC ET 200SP CPU 1510SP-1 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1512SP F-1 PN< V2.9.7
SiemensSIMATIC ET 200SP CPU 1512SP F-1 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1512SP-1 PN< V2.9.7
SiemensSIMATIC ET 200SP CPU 1512SP-1 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1514SP F-2 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1514SP-2 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1514SPT F-2 PN< V3.0.3
SiemensSIMATIC ET 200SP CPU 1514SPT-2 PN< V3.0.3
SiemensSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)< V21.9.7
SiemensSIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)>= V30.0.0, < V30.1.0
SiemensSIMATIC IPC DiagMonitor< *
SiemensSIMATIC NET PC Software V14< *
SiemensSIMATIC NET PC Software V16< V16 Update 8
SiemensSIMATIC NET PC Software V17< V17 SP1 Update 1
SiemensSIMATIC NET PC Software V18< V18 Update 1
SiemensSIMATIC PCS 7 V9.1< V9.1 SP2 UC08
SiemensSIMATIC PCS neo V4.0< *
SiemensSIMATIC S7-1500 CPU 1511-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511-1 PN< V3.0.3
SiemensSIMATIC S7-1500 CPU 1511C-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511C-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511F-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511F-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511F-1 PN< V3.0.3
SiemensSIMATIC S7-1500 CPU 1511T-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511T-1 PN< V3.0.3
SiemensSIMATIC S7-1500 CPU 1511TF-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1511TF-1 PN< V3.0.3
SiemensSIMATIC S7-1500 CPU 1512C-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1512C-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1513-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1513-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1513-1 PN< V3.0.3
SiemensSIMATIC S7-1500 CPU 1513F-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1513F-1 PN< V2.9.7
SiemensSIMATIC S7-1500 CPU 1513F-1 PN< V3.0.3
SiemensSIMATIC S7-1500 CPU 1515-2 PN< V2.9.7

References

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-288327.2A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versiCVE-2023-288338.8Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicoCVE-2023-288344.3Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as NextcloudCVE-2023-288357.5Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share wasCVE-2023-288365.4Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to versions 4.1.4 and 4.2.2, a storedCVE-2023-288374.9Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2.2, a memory exhaustion bug exists in WaCVE-2023-288388.1GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 9.5.13 and 10.0.7, a SQL Injection vCVE-2023-288399.8Shoppingfeed PrestaShop is an add-on to the PrestaShop ecommerce platform to synchronize data. The module Shoppingfeed for PrestaShop is vulCVE-2023-28849.8Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allowCVE-2023-288408.7Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various oCVE-2023-288416.8Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various oCVE-2023-288426.8Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various
CVE-2023-28831: High severity, CVSS 7.5 | Vulnix