NewsSiemens ProductCERT

    SSA-264815 V1.0: Type Confusion Vulnerability in OpenSSL X.400 Address Processing in SIMATIC Products

    Several SIMATIC products are affected by a type confusion vulnerability relating to OpenSSL X.400 address processing (CVE-2023-0286), as disclosed disclosed on 2023-02-07 at https://www.openssl.org/news/secadv/20230207.txt . Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

    Source: https://cert-portal.siemens.com/productcert/html/ssa-264815.html

    ID