NewsSiemens ProductCERT

    SSA-264814 V1.0: Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Products

    Several SIMATIC products are affected by a timing based side channel vulnerability in the OpenSSL RSA Decryption (CVE-2023-4304), as disclosed on 2023-02-07 at https://www.openssl.org/news/secadv/20230207.txt . Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

    Linked advisories

    Affected vendors and products

    More on OpenSSL

    Other advisories

    Other news entries

    Source: https://cert-portal.siemens.com/productcert/html/ssa-264814.html

    ID