Denial of Service Vulnerability in SIMATIC and SIPLUS Products by Siemens

CVE-2023-50763

What is CVE-2023-50763?

A vulnerability exists in the web server components of certain SIMATIC and SIPLUS products. If configured to process PKCS12 containers, it can result in an infinite loop when handling incomplete certificate chains. This flaw can be exploited by an authenticated remote attacker to import deliberately crafted PKCS12 containers, potentially causing a denial of service. Users are advised to assess their systems and apply appropriate mitigations or updates to address this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References