The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V8.1 SP1, V2.2, V2.9.7, V3.0.3, V21.9.7, and 16 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Siemens SIMATIC BRAUMAT
fixed in V8.1 SP1
- Siemens SIMATIC Cloud Connect 7 CC712
fixed in V2.2
- Siemens SIMATIC Cloud Connect 7 CC716
fixed in V2.2
- Siemens SIMATIC Comfort/Mobile RT
All versions
- Siemens SIMATIC Drive Controller CPU 1504D TF
fixed in V2.9.7
- Siemens SIMATIC Drive Controller CPU 1504D TF
From V3.0.1 · fixed in V3.0.3
- Siemens SIMATIC Drive Controller CPU 1507D TF
fixed in V2.9.7
- Siemens SIMATIC Drive Controller CPU 1507D TF
From V3.0.1 · fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN
fixed in V2.9.7
- Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1510SP-1 PN
fixed in V2.9.7
- Siemens SIMATIC ET 200SP CPU 1510SP-1 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN
fixed in V2.9.7
- Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1512SP-1 PN
fixed in V2.9.7
- Siemens SIMATIC ET 200SP CPU 1512SP-1 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SP-2 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN
fixed in V3.0.3
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
fixed in V21.9.7
- Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
From V30.0.0 · fixed in V30.1.0
- Siemens SIMATIC IPC DiagMonitor
All versions
- Siemens SIMATIC NET PC Software V14
All versions
- Siemens SIMATIC NET PC Software V16
fixed in V16 Update 8
- Siemens SIMATIC NET PC Software V17
fixed in V17 SP1 Update 1
- Siemens SIMATIC NET PC Software V18
fixed in V18 Update 1
- Siemens SIMATIC PCS 7 V9.1
fixed in V9.1 SP2 UC08
- Siemens SIMATIC PCS neo V4.0
All versions
- Siemens SIMATIC S7-1500 CPU 1511-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511-1 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1511C-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511C-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511F-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511F-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511F-1 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1511T-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511T-1 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1512C-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1512C-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1513-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1513-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1513-1 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1513F-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1513F-1 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1513F-1 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1515-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1515-2 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515F-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1515F-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1515F-2 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515T-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1515T-2 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP
fixed in V3.0.3
- Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK
fixed in V2.9.7
- Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK
fixed in V2.9.7
- Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN
fixed in V2.9.7
- Siemens SIMATIC S7-1500 Software Controller V2
fixed in V21.9.7
- Siemens SIMATIC S7-1500 Software Controller V3
fixed in V30.1.0
- Siemens SIMATIC S7-PLCSIM Advanced
fixed in V5.0 Update 2
- Siemens SIMATIC SISTAR
fixed in V8.1 SP1
- Siemens SIMATIC WinCC OA V3.17
fixed in V3.17 P029
- Siemens SIMATIC WinCC OA V3.18
fixed in V3.18 P019
- Siemens SIMATIC WinCC OA V3.19
fixed in V3.19 P005
- Siemens SIMATIC WinCC OPC UA Client
fixed in V2.0.0.1
- Siemens SIMATIC WinCC Runtime Professional V16
All versions
- Siemens SIMATIC WinCC Runtime Professional V17
All versions
- Siemens SIMATIC WinCC Runtime Professional V18
All versions
- Siemens SIMATIC WinCC Runtime Professional V19
fixed in V19 Update 2
- Siemens SIMATIC WinCC Unified OPC UA Server
fixed in V5.0.0.0
- Siemens SIMATIC WinCC V7.4
All versions
- Siemens SIMATIC WinCC V7.5
fixed in V7.5 SP2 Update 20
- Siemens SIMATIC WinCC V8.0
fixed in V8.0 Update 5
- Siemens SINUMERIK MC
fixed in V1.22
- Siemens SINUMERIK ONE
fixed in V6.22
- Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1510SP-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1510SP-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP-1 PN
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511F-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1511F-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1513-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1513-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1513-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1513-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1513F-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1513F-1 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1515F-2 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1515F-2 PN
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1515F-2 PN RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL
fixed in V2.9.7
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP
fixed in V3.0.3
- Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
fixed in V3.0.3
- Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP
fixed in V3.0.3