CVE-2023-28831 (simatic_cloud_connect_7_cc712_firmware, simatic_cloud_connect_7_cc716_firmware, simatic_drive_controller_cpu_1504d_tf_firmware, simatic_drive_controller_cpu_1507d_tf_firmware, simatic_et_200sp_open_controller_cpu_firmware, simatic_s7-

The ANSI C OPC UA SDK contains an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.

This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate.

ansi application attacker certificate cve denial of service integer integer overflow loop opc opc ua overflow run sdk service unauthenticated validation vulnerability