CVE-2023-52891

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-1325
View all →

Vulnerability Description

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.

Related Vulnerabilities

CVE-2023-28968

MEDIUM
CVSS:5.3(Medium)

An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) Application Signature component of Junos OS's AppID service on...

CWE-13252023

CVE-2024-2511

MEDIUM
CVSS:5.9(Medium)

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to tr...

CWE-13252024

CVE-2024-27796

HIGH
CVSS:8.1(High)

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges.

CWE-13252024

CVE-2021-43174

HIGH
CVSS:7.5(High)

NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-...

CWE-13252021

CVE-2025-2240

HIGH
CVSS:7.5(High)

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates ...

CWE-13252025

CVE-2024-2511

MEDIUM
CVSS:5.9(Medium)

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to tr...

CWE-13252024