Skip to content
OpenAdvisories
High ICSA-17-243-01 1 CVE

Siemens OPC UA Protocol Stack Discovery Service (Update E)

Published Aug 30, 2017 · Updated May 6, 2025 · Revision 7

Vendor: Siemens Product: SIMATIC IT Production Suite Product: SIMATIC NET PC Software V14 Product: SIMATIC PCS 7 Product: SIMATIC WinCC Product: SIMATIC WinCC Runtime Professional V13 Product: SIMATIC WinCC Runtime Professional V14

Summary

Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation https://github.com/OPCFoundation/UA-.NETStandard and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).

Vulnerabilities 1

  • Unscored —
    CVE-2017-12069

    An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Se…

Revision history

  1. #7

    Revision - Fixing typos

  2. #6

    Added solution for SIMATIC NET PC Software V14 and clarified affected versions; Clarified no remediation planned

  3. #5

    Updated information regarding SIMATIC NET PC Software

  4. #4

    Added fix for SIMATIC NET PC Software

  5. #3

    Added fix for SIMATIC IT Production Suite

  6. #2

    Clarified "Affected Products"

  7. #1

    Publication Date

References