CVE-2023-28831: Siemens SIMATIC Cloud Connect 7 CC712 Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

Affected products

Siemens SIMATIC Cloud Connect 7 CC712 Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC Cloud Connect 7 CC716 Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC Drive Controller CPU 1504d Tf Firmware: before 2.2 (fixed in 2.2)
Siemens SIMATIC Drive Controller CPU 1507d Tf Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC Et 200sp Open Controller CPU Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1200 CPU Firmware: before 3.0.3 (fixed in 3.0.3)
Siemens SIMATIC s7-1500 CPU 1510sp-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1510sp F-1 Pn Firmware: before 3.0.3 (fixed in 3.0.3)
Siemens SIMATIC s7-1500 CPU 1511-1 Pn Firmware: before 21.9.7 (fixed in 21.9.7)
Siemens SIMATIC s7-1500 CPU 1511c-1 Pn Firmware: before 30.0.0 (fixed in 30.0.0)
Siemens SIMATIC s7-1500 CPU 1511f-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1511t-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1511tf-1 Pn Firmware: before 3.0.3 (fixed in 3.0.3)
Siemens SIMATIC s7-1500 CPU 1512c-1 Pn Firmware: before 3.0.3 (fixed in 3.0.3)
Siemens SIMATIC s7-1500 CPU 1512sp-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1512sp F-1 Pn Firmware: before 3.0.3 (fixed in 3.0.3)
Siemens SIMATIC s7-1500 CPU 1513-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1513f-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1513r-1 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1514sp-2 Pn Firmware: before 3.0.3 (fixed in 3.0.3)
Siemens SIMATIC s7-1500 CPU 1514sp F-2 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1514spt-2 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1514spt F-2 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1515-2 Pn Firmware: before 2.9.7 (fixed in 2.9.7)
Siemens SIMATIC s7-1500 CPU 1515f-2 Pn Firmware: before 3.0.3 (fixed in 3.0.3)
and 53 more

Published 2023-09-12. Last modified 2026-06-17.