← Back to home
SIEMENS-SSA-535640  ·  Published 2022-04-12  ·  View on Siemens ProductCERT ↗

SSA-535640 V1.5 (Last Update: 2022-04-12): Vulnerability in Industrial Products

CVSS 8.2 HIGH

Risk Summary

<p>Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation <a href="https://github.com/OPCFoundation/UA-.NETStandard" class="uri">https://github.com/OPCFoundation/UA-.NETStandard</a> and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).</p>

CVEs (1)

Remediations

  • Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-535640 V1.5 (Last Update: 2022-04-12): Vulnerability in Industrial Products See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more