The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.
Conclusion & alert: CVE-2023-28831 is rated Moderate Risk (53.2/100): CVSS High severity, with medium exploitation likelihood (EPSS 0.82%). Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.71% | 0.82% | +0.10% |
| 2 | 2026-06-07 | 0.64% | 0.71% | +0.07% |
| 3 | 2026-04-09 | — | 0.64% | — |
Full EPSS history (15 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 8.7 | 4.0 | HIGH |
|
— | — | [email protected] |
| 7.5 | 3.1 | HIGH |
|
3.9 | 3.6 | [email protected] |
| 7.5 | 3.1 | HIGH |
|
3.9 | 3.6 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| siemens | simatic_cloud_connect_7_cc712_firmware | < 2.2 | cpe:2.3:o:siemens:simatic_cloud_connect_7_cc712_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_cloud_connect_7_cc716_firmware | < 2.2 | cpe:2.3:o:siemens:simatic_cloud_connect_7_cc716_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_drive_controller_cpu_1504d_tf_firmware | < 2.2 | cpe:2.3:o:siemens:simatic_drive_controller_cpu_1504d_tf_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_drive_controller_cpu_1507d_tf_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_drive_controller_cpu_1507d_tf_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_et_200sp_open_controller_cpu_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_et_200sp_open_controller_cpu_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1200_cpu_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1200_cpu_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1510sp-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1510sp_f-1_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1510sp_f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1511-1_pn_firmware | < 21.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1511c-1_pn_firmware | < 30.0.0 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511c-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1511f-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1511t-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511t-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1511tf-1_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1511tf-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1512c-1_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512c-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1512sp-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1512sp_f-1_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1512sp_f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1513-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1513f-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1513r-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1513r-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1514sp-2_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1514sp-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1514sp_f-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1514sp_f-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1514spt-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1514spt-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1514spt_f-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1514spt_f-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1515-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1515f-2_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515f-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1515r-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515r-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1515t-2_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515t-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1515tf-2_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1515tf-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1516-3_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1516t-3_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516t-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1516tf-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1517-3_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1517h-3_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517h-3_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1517t-3_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517t-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1517tf-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518-4_pn\/dp_firmware | < 21.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518hf-4_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518hf-4_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518t-4_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518t-4_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518tf-4_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_s7-1518-4_pn\/dp_odk_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_cpu_s7-1518f-4_pn\/dp_odk_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_et_200pro_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_et_200pro_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-1500_software_controller_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-1500_software_controller_firmware:*:*:*:*:*:*:*:* |
| siemens | simatic_s7-plcsim_advanced_firmware | < 2.9.7 | cpe:2.3:o:siemens:simatic_s7-plcsim_advanced_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1510sp-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1510sp-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1510sp-1_pn_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1510sp-1_pn_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1510sp_f-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1510sp_f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1510sp_f-1_pn_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1510sp_f-1_pn_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1512sp-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1512sp-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1512sp-1_pn_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1512sp-1_pn_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1512sp_f-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1512sp_f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_et_200sp_cpu_1512sp_f-1_pn_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_et_200sp_cpu_1512sp_f-1_pn_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1511-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1511-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1511-1_pn_t1_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1511-1_pn_t1_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1511-1_pn_tx_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1511-1_pn_tx_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1511f-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1511f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1513-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1513-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1513f-1_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1513f-1_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1515f-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1515f-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1515f-2_pn_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1515f-2_pn_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1515f-2_pn_t2_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1515f-2_pn_t2_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1515r-2_pn_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1515r-2_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1515r-2_pn_tx_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1515r-2_pn_tx_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1516-3_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1516-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1516-3_pn\/dp_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1516-3_pn\/dp_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1516-3_pn\/dp_tx_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1516-3_pn\/dp_tx_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1516f-3_pn\/dp_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1516f-3_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1516f-3_pn\/dp_rail_firmware | < 2.9.7 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1516f-3_pn\/dp_rail_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1517h-3_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1517h-3_pn_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1518-4_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | < 3.0.3 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1518f-4_pn\/dp_firmware | < 3.0.3 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518f-4_pn\/dp_firmware:*:*:*:*:*:*:*:* |
| siemens | siplus_s7-1500_cpu_1518hf-4_pn_firmware | < 3.0.3 | cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518hf-4_pn_firmware:*:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-118850.html | Mitigation Vendor Advisory |
| https://cert-portal.siemens.com/productcert/html/ssa-711309.html | Mitigation Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-118850.pdf | Mitigation Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-711309.pdf | Vendor Advisory |