Analysis Summary

CVE-2023-50763

Siemens SIMATIC CP, SIPLUS ET, TIM are vulnerable to a denial of service, caused by an infinite loop when processing incomplete certificate chains. By persuading a victim to parse a specially crafted certificate file, a remote attacker could exploit this vulnerability to cause a denial of service.

Impact

• Denial of Service

Indicators of Compromise

CVE

• CVE-2023-50763

Affected Vendors

Affected Products

• Siemens SIMATIC CP 1542SP-1
• Siemens SIMATIC CP 1543SP-1
• Siemens SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL
• Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC
• Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL
• Siemens SIPLUS TIM 1531 IRC
• Siemens TIM 1531 IRC

Remediation

Refer to Siemens Security Advisory for patch, upgrade or suggested workaround information.

Siemens Security Advisory