Skip to content
OpenAdvisories
High SSA-264815 1 CVE

SSA-264815: Type Confusion Vulnerability in OpenSSL X.400 Address Processing in SIMATIC Products

Published Aug 8, 2023 · Updated Dec 10, 2024 · Revision 4

Vendor: Siemens Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC IPC DiagBase Product: SIMATIC IPC DiagMonitor Product: SIMATIC S7-1200 CPU family (incl. SIPLUS variants) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC S7-1500 CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK00-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1511C-1 PN (6ES7511-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK00-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK01-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FK02-0AB0) Product: SIMATIC S7-1500 CPU 1511F-1 PN (6ES7511-1FL03-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TK01-0AB0) Product: SIMATIC S7-1500 CPU 1511T-1 PN (6ES7511-1TL03-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UK01-0AB0) Product: SIMATIC S7-1500 CPU 1511TF-1 PN (6ES7511-1UL03-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK00-0AB0) Product: SIMATIC S7-1500 CPU 1512C-1 PN (6ES7512-1CK01-0AB0) Product: SIMATIC S7-1500 CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) +121 more

Summary

Several SIMATIC products are affected by a type confusion vulnerability relating to OpenSSL X.400 address processing (CVE-2023-0286), as disclosed disclosed on 2023-02-07 at
https://www.openssl.org/news/secadv/20230207.txt.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • High 7.4
    CVE-2023-0286 Public exploit EPSS 68%

    X.400 address type confusion in X.509 GeneralName

    There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io

Revision history

  1. #4

    Added fix for SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) V30 and SIMATIC S7-1500 Software Controller V3

  2. #3

    Clarified that no fix is planned for SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor; Added fix for SIMATIC S7-PLCSIM Advanced

  3. #2

    Clarified SIMATIC ET 200SP Open Controller versions and added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants); Clarified SIMATIC S7-1500 Software Controller versions and added fix for SIMATIC S7-1500 Software Controller V2

  4. #1

    Publication Date

References