MEDIUM🇵🇱 Wersja polska

CVE-2022-25622

CVSS 5.3v3.1pub. 2022-04-12upd. 2024-11-21

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

  • Siemens Simatic Cfu Diq

    HW
    Siemens
    all versions

  • Siemens Simatic Cfu Diq Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Cfu Pa

    HW
    Siemens
    all versions

  • Siemens Simatic Cfu Pa Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu Firmware

    OS
    Siemens
    < 2.0.0

  • Siemens Simatic S7 300 Cpu

    HW
    Siemens
    all versions

  • Siemens Simatic S7 300 Cpu Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 400h V6

    HW
    Siemens
    all versions

  • Siemens Simatic S7 400h V6 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 400 Pn\/dp V7

    HW
    Siemens
    all versions

  • Siemens Simatic S7 400 Pn\/dp V7 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 410 V10

    HW
    Siemens
    all versions

  • Siemens Simatic S7 410 V10 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic S7 410 V8

    HW
    Siemens
    all versions

  • Siemens Simatic S7 410 V8 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Tdc Cp51m1

    HW
    Siemens
    all versions

  • Siemens Simatic Tdc Cp51m1 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Tdc Cpu555

    HW
    Siemens
    all versions

  • Siemens Simatic Tdc Cpu555 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Winac Rtx

    HW
    Siemens
    all versions

  • Siemens Simatic Winac Rtx Firmware

    OS
    Siemens
    all versions

  • Siemens Simit Simulation Platform

    APP
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-20093CRITICAL9.1PL ✓same product

Buffer over-read w Wibu-Systems CodeMeter — ujawnienie pamięci lub crash

CVE-2021-42029HIGH7.8same product

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Por...

CVE-2021-40368HIGH7.5same product

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412...

CVE-2020-15783HIGH7.5same product

A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants...

CVE-2019-19300HIGH7.5same product

A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/...