Skip to content
OpenAdvisories
Critical SSA-028723 5 CVEs

SSA-028723: Multiple OpenSSL Vulnerabilities in BFCClient Before V2.17

Published Aug 12, 2025 · Updated Aug 13, 2025 · Revision 2

Vendor: Siemens Product: BFCClient

Summary

Siemens BFCClient contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, to change the application behaviour or to create a denial of service condition.

Siemens has released a new version for BFCClient and recommends to update to the latest version.

Vulnerabilities 5

  • Critical 9.8
    CVE-2021-3711 Public exploit EPSS 88%

    SM2 Decryption Buffer Overflow

    In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramet…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  • High 7.5
    CVE-2023-0464 Public exploit

    Excessive Resource Usage Verifying X.509 Policy Constraints

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.4
    CVE-2021-3712 Public exploit EPSS 48%

    Read buffer overruns processing ASN.1 strings

    ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  • High 7.4
    CVE-2023-0286 Public exploit EPSS 68%

    X.400 address type confusion in X.509 GeneralName

    There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io

Revision history

  1. #2

    Updated acknowledgments for CVE-2023-0286

  2. #1

    Publication Date

References