medium5.3
CVE-2022-25622
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header le…
Impact
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Cfu Diq Firmware | All versions |
| Siemens | Simatic Cfu Pa Firmware | All versions |
| Siemens | Simatic S7-300 Cpu Firmware | All versions |
| Siemens | Simatic S7-400h V6 Firmware | All versions |
| Siemens | Simatic S7-400 Pn\/Dp V7 Firmware | All versions |
| Siemens | Simatic S7-410 V8 Firmware | All versions |
| Siemens | Simatic S7-410 V10 Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu Firmware | before 2.0.0 |
| Siemens | Simatic Tdc Cp51m1 Firmware | All versions |
| Siemens | Simatic Tdc Cpu555 Firmware | All versions |
| Siemens | Simatic Winac Rtx Firmware | All versions |
| Siemens | Simit Simulation Platform | All versions |