Skip to content
OpenAdvisories
Medium SSA-264814 1 CVE

SSA-264814: Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Products

Published Aug 8, 2023 · Updated Dec 10, 2024 · Revision 5

Vendor: Siemens Product: SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00) Product: SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00) Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC Logon V1.6 Product: SIMATIC PDM V9.1 Product: SIMATIC PDM V9.2 Product: SIMATIC Process Historian 2019 OPC UA Server Product: SIMATIC Process Historian 2020 OPC UA Server Product: SIMATIC Process Historian 2022 OPC UA Server Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) +121 more

Summary

Several SIMATIC products are affected by a timing based side channel vulnerability in the OpenSSL RSA Decryption (CVE-2023-4304), as disclosed on 2023-02-07 at
https://www.openssl.org/news/secadv/20230207.txt.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • Medium 5.9
    CVE-2022-4304 Public exploit EPSS 24%

    Timing Oracle in RSA Decryption

    A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io

Revision history

  1. #5

    Added fix for SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V30 and SIMATIC S7-1500 Software Controller V3

  2. #4

    Added fix for SIMATIC S7-PLCSIM Advanced

  3. #3

    Added fix for SIMATIC Process Historian 2022 OPC UA Server

  4. #2

    Added fix information for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 and SIMATIC S7-1500 Software Controller V2

  5. #1

    Publication Date

References