Integer overflow

2023-09-1210:15:00

PRIOn knowledge base

www.prio-n.com

opc ua

integer overflow

denial of service

vulnerability

certificate validation

remote attacker

0.001 Low

EPSS

Percentile

48.6%

JSON

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.

This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

CPENameOperatorVersion
simatic_cloud_connect_7_cc712_firmwarelt2.2
simatic_cloud_connect_7_cc716_firmwarelt2.2
simatic_drive_controller_cpu_1504d_tf_firmwarelt2.2
simatic_drive_controller_cpu_1507d_tf_firmwarelt2.9.7
simatic_et_200sp_open_controller_cpu_firmwarelt2.9.7
simatic_s7-1200_cpu_firmwarelt3.0.3
simatic_s7-1500_cpu_1510sp-1_pn_firmwarelt2.9.7
simatic_s7-1500_cpu_1510sp_f-1_pn_firmwarelt3.0.3
simatic_s7-1500_cpu_1511-1_pn_firmwarelt21.9.7
simatic_s7-1500_cpu_1511c-1_pn_firmwarelt30.0.0

Name	Operator	Version
simatic_cloud_connect_7_cc712_firmware	lt	2.2
simatic_cloud_connect_7_cc716_firmware	lt	2.2
simatic_drive_controller_cpu_1504d_tf_firmware	lt	2.2
simatic_drive_controller_cpu_1507d_tf_firmware	lt	2.9.7
simatic_et_200sp_open_controller_cpu_firmware	lt	2.9.7
simatic_s7-1200_cpu_firmware	lt	3.0.3
simatic_s7-1500_cpu_1510sp-1_pn_firmware	lt	2.9.7
simatic_s7-1500_cpu_1510sp_f-1_pn_firmware	lt	3.0.3
simatic_s7-1500_cpu_1511-1_pn_firmware	lt	21.9.7
simatic_s7-1500_cpu_1511c-1_pn_firmware	lt	30.0.0