Memory Exhaustion Vulnerability in SIMATIC Energy Manager and Related Products

CVE-2023-52891

Summary

A significant vulnerability affects multiple Siemens products, including the SIMATIC Energy Manager and related systems. This vulnerability allows a potential attacker to exploit weaknesses in the Unified Automation .NET based OPC UA Server SDK, leading to high load situations and possible memory exhaustion. Such an attack could disrupt server operations, resulting in denial of service for legitimate users. Users of affected products are encouraged to review their system configurations and apply necessary updates to minimize exposure to this security flaw.

References