Description
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Siemens SIMATIC Energy Manager Basic
Default version status: unknown
0 to < V7.5affected
Siemens SIMATIC Energy Manager PRO
Default version status: unknown
0 to < V7.5affected
Siemens SIMATIC IPC DiagBase
Default version status: unknown
0 to < *affected
Siemens SIMATIC IPC DiagMonitor
Default version status: unknown
0 to < *affected
Siemens SIMIT V10
Default version status: unknown
0 to < *affected
Siemens SIMIT V11
Default version status: unknown
0 to < V11.1affected