CVE-2023-28831 Integer overflow in SIMATIC BRAUMAT
An unauthenticated remote attacker can cause a denial of service in Siemens SIMATIC devices by sending a crafted certificate that triggers an infinite loop during validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-28831?
CVE-2023-28831 is a high-severity vulnerability in Siemens SIMATIC BRAUMAT, published on 12 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Weakness: CWE-190
Which versions are affected by CVE-2023-28831?
It affects 78 products.
Products include Siemens Simatic Cloud Connect 7 Cc712 Firmware, Siemens Simatic Cloud Connect 7 Cc716 Firmware, Siemens Simatic Drive Controller Cpu 1504d Tf Firmware, Siemens Simatic Drive Controller Cpu 1507d Tf Firmware, Siemens Simatic Et 200sp Open Controller Cpu Firmware, Siemens Simatic S7-1200 Cpu Firmware and 72 more.
How do I fix CVE-2023-28831?
No fix has been published for CVE-2023-28831 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-28831 being exploited?
There is no known exploitation of CVE-2023-28831 in the wild and no public exploit code.
Sources
Also known as GHSA-p7vc-4gr6-g2px.