Skip to content
OpenAdvisories
High SSA-535640 1 CVE

SSA-535640: Vulnerability in Industrial Products

Published Aug 30, 2017 · Updated Apr 12, 2022 · Revision 6

Vendor: Siemens Product: SIMATIC IT Production Suite Product: SIMATIC NET PC Software V14 Product: SIMATIC PCS 7 Product: SIMATIC WinCC Product: SIMATIC WinCC Runtime Professional V13 Product: SIMATIC WinCC Runtime Professional V14

Summary

Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation https://github.com/OPCFoundation/UA-.NETStandard and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).

Vulnerabilities 1

  • Unscored —
    CVE-2017-12069

    An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Se…

Revision history

  1. #6

    Added solution for SIMATIC NET PC Software V14 and clarified affected versions; Clarified no remediation planned

  2. #5

    Updated information regarding SIMATIC NET PC Software

  3. #4

    Added fix for SIMATIC NET PC Software

  4. #3

    Added fix for SIMATIC IT Production Suite

  5. #2

    Clarified "Affected Products"

  6. #1

    Publication Date

References