Skip to content
OpenAdvisories
High SSA-711309 1 CVE

SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products

Published Sep 12, 2023 · Updated Nov 11, 2025 · Revision 16

Vendor: Siemens Product: SIMATIC BRAUMAT Product: SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00) Product: SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00) Product: SIMATIC Comfort/Mobile RT Product: SIMATIC Drive Controller CPU 1504D TF (6ES7615-4DF10-0AB0) Product: SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SK03-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DK03-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK01-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SM03-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK01-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DM03-0AB0) Product: SIMATIC ET 200SP CPU 1514SP F-2 PN (6ES7514-2SN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SP-2 PN (6ES7514-2DN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SPT F-2 PN (6ES7514-2WN03-0AB0) Product: SIMATIC ET 200SP CPU 1514SPT-2 PN (6ES7514-2VN03-0AB0) Product: SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) Product: SIMATIC IPC DiagMonitor Product: SIMATIC NET PC Software V14 Product: SIMATIC NET PC Software V16 Product: SIMATIC NET PC Software V17 Product: SIMATIC NET PC Software V18 Product: SIMATIC PCS 7 V9.1 Product: SIMATIC PCS neo V4.0 Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK01-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AK02-0AB0) Product: SIMATIC S7-1500 CPU 1511-1 PN (6ES7511-1AL03-0AB0) +114 more

Summary

The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #16

    Updated fix for SIMATIC PCS 7 V9.1

  2. #15

    Added fix for SIMATIC WinCC V7.5 and SIMATIC PCS 7 V9.1

  3. #14

    Added fix for SIMATIC NET PC Software V16

  4. #13

    No fix planned for SIMATIC Comfort/Mobile RT

  5. #12

    No fix planned for SIMATIC PCS neo V4.0; removed SIMATIC PCS neo V4.1 as not affected

  6. #11

    Added fix for SIMATIC WinCC V8.0

  7. #10

    Added fix for SIMATIC WinCC Runtime Professional V19

  8. #9

    Added fix for SIMATIC ET 200SP Open Controller CPU 1515SP PC2 V30

  9. #8

    Added SIMATIC NET PC Software as affected product; added fix for SIMATIC NET PC Software V17, V18; added fix for SIMATIC S7-1500 Software Controller V3; removed unaffected product TIA Portal

  10. #7

    Removed unaffected device SIMATIC S7-1200 CPU family (incl. SIPLUS variants), added SIMATIC WinCC (Classic and Runtime Professional) and Totally Integrated Automation Portal to the list of affected devices, no fix planned for SIMATIC PCS 7 V9.1

  11. #6

    Added fix for SIMATIC WinCC Unified OPC UA Client/Server; Added SIMATIC PCS 7 V9.1 as affected; Added specific mitigation measure for CVE-2023-28831 (disable OPC UA)

  12. #5

    No fix planned for SIMATIC IPC DiagMonitor

  13. #4

    Added SIMATIC Comfort/Mobile RT, SIMATIC IPC DiagMonitor, SIMATIC WinCC Unified OPC UA Client/Server, and SIMATIC PCS neo as affected products; removed unaffected devices: 6ES7513-1RL00-0AB0, 6ES7513-1RM03-0AB0, 6ES7515-2RM00-0AB0, 6ES7515-2RN03-0AB0, 6AG1515-2RM00-7AB0, 6AG2515-2RM00-4AB0, 6ES7517-3HP00-0AB0, 6AG1517-3HP00-4AB0, 6ES7518-4JP00-0AB0, 6AG1518-4JP00-4AB0; added fix for SIMATIC S7-PLCSIM Advanced

  14. #3

    Added additional vulnerable products SIMATIC BRAUMAT / SISTAR

  15. #2

    Added additional vulnerable products SIMATIC WinCC OA V3.17, SIMATIC WinCC OA V3.18, and SIMATIC WinCC OA V3.19; clarified that both ANSI C and C++ implementations are affected

  16. #1

    Publication Date

References