CVE-2024-23814
Medium
Description
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.
SeverityMedium
CVSS5.3
Exploit probability—
ProductSIDOOR ATD430W
PublishedFeb 11, 2025
First seenFeb 11, 2025
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- Siemens SIMATIC CFU DIQV2.0.0 or later
- Siemens SIMATIC CFU PAV2.0.0, V2.0 or later
- Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)V1.3 or later
- Siemens SIMATIC PN/PN CouplerV6.0.0 or later
- Siemens SIMATIC S7-1200 CPU 1211C AC/DC/RlyV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DCV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1211C DC/DC/RlyV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1212C AC/DC/RlyV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DCV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1212C DC/DC/RlyV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DCV4.4 or later
- Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/RlyV4.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIDOOR ATD430W | 0 | — |
| Siemens SIDOOR ATE530G COATED | 0 | — |
| Siemens SIDOOR ATE530S COATED | 0 | — |
| Siemens SIMATIC CFU DIQ | v < V2.0.0 | V2.0.0 |
| Siemens SIMATIC CFU PA | v < V2.0.0, v < V2.0 | V2.0.0, V2.0 |
| Siemens SIMATIC ET 200AL IM 157-1 PN | 0 | — |
| Siemens SIMATIC ET 200M IM 153-4 PN IO HF | 0 | — |
| Siemens SIMATIC ET 200M IM 153-4 PN IO ST | 0 | — |
| Siemens SIMATIC ET 200MP IM 155-5 PN BA | 0 | — |
| Siemens SIMATIC ET 200MP IM 155-5 PN HF | 0 | — |
| Siemens SIMATIC ET 200MP IM 155-5 PN ST | 0 | — |
| Siemens SIMATIC ET 200pro IM 154-3 PN HF | 0 | — |
| Siemens SIMATIC ET 200pro IM 154-4 PN HF | 0 | — |
| Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU | 0 | — |
| Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU | 0 | — |
| Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU | 0 | — |
| Siemens SIMATIC ET 200S IM 151-3 PN FO | 0 | — |
| Siemens SIMATIC ET 200S IM 151-3 PN HF | 0 | — |
| Siemens SIMATIC ET 200S IM 151-3 PN HS | 0 | — |
| Siemens SIMATIC ET 200S IM 151-3 PN ST | 0 | — |
| Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU | 0 | — |
| Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU | 0 | — |
| Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN | 0 | — |
| Siemens SIMATIC ET 200SP CPU 1510SP-1 PN | 0 | — |
| Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN | 0 | — |
| Siemens SIMATIC ET 200SP CPU 1512SP-1 PN | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 MF HF | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN BA | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) | v < V1.3 | V1.3 |
| Siemens SIMATIC ET 200SP IM 155-6 PN HF | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN HS | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN ST | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN ST BA | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF | 0 | — |
| Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF | 0 | — |
| Siemens SIMATIC PN/PN Coupler | v < V6.0.0 | V6.0.0 |
| Siemens SIMATIC Power Line Booster PLB, Base Module | 0 | — |
| Siemens SIMATIC Power Line Booster PLB, Modem Module ST | 0 | — |
| Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIMATIC S7-1500 CPU 1511-1 PN | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1511F-1 PN | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1513-1 PN | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1513F-1 PN | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1515-2 PN | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1515F-2 PN | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 314C-2 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 315-2 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 315F-2 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 315T-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 317-2 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 317F-2 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 317T-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 319-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-300 CPU 319F-3 PN/DP | 0 | — |
| Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) | 0 | — |
| Siemens SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) | 0 | — |
| Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) | v < V10.2 | V10.2 |
| Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) | v < V8.3 | V8.3 |
| Siemens SIMATIC TDC CP51M1 | 0 | — |
| Siemens SIMATIC TDC CPU555 | 0 | — |
| Siemens SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants) | 0 | — |
| Siemens SIMOCODE pro V PROFINET | 0 | — |
| Siemens SINUMERIK 840D sl | 0 | — |
| Siemens SIPLUS ET 200M IM 153-4 PN IO HF | 0 | — |
| Siemens SIPLUS ET 200M IM 153-4 PN IO ST | 0 | — |
| Siemens SIPLUS ET 200MP IM 155-5 PN HF | 0 | — |
| Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL | 0 | — |
| Siemens SIPLUS ET 200MP IM 155-5 PN ST | 0 | — |
| Siemens SIPLUS ET 200MP IM 155-5 PN ST TX RAIL | 0 | — |
| Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU | 0 | — |
| Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU | 0 | — |
| Siemens SIPLUS ET 200S IM151-3 PN HF | 0 | — |
| Siemens SIPLUS ET 200S IM151-3 PN ST | 0 | — |
| Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN HF | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN ST | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN ST BA | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL | 0 | — |
| Siemens SIPLUS ET 200SP IM 155-6 PN ST TX RAIL | 0 | — |
| Siemens SIPLUS HCS4200 CIM4210 | 0 | — |
| Siemens SIPLUS HCS4200 CIM4210C | 0 | — |
| Siemens SIPLUS HCS4300 CIM4310 | 0 | — |
| Siemens SIPLUS NET PN/PN Coupler | v < V6.0.0 | V6.0.0 |
| Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1214 DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1215C DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1200 CPU 1215FC DC/DC/DC | v < V4.4 | V4.4 |
| Siemens SIPLUS S7-1500 CPU 1511-1 PN | 0 | — |
| Siemens SIPLUS S7-1500 CPU 1511F-1 PN | 0 | — |
| Siemens SIPLUS S7-1500 CPU 1513-1 PN | 0 | — |
| Siemens SIPLUS S7-1500 CPU 1513F-1 PN | 0 | — |
| Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP | 0 | — |
| Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP | 0 | — |
| Siemens SIPLUS S7-300 CPU 314C-2 PN/DP | 0 | — |
| Siemens SIPLUS S7-300 CPU 315-2 PN/DP | 0 | — |
| Siemens SIPLUS S7-300 CPU 315F-2 PN/DP | 0 | — |
| Siemens SIPLUS S7-300 CPU 317-2 PN/DP | 0 | — |
| Siemens SIPLUS S7-300 CPU 317F-2 PN/DP | 0 | — |
| Siemens SIWAREX WP231 | 0 | — |
| Siemens SIWAREX WP241 | 0 | — |
| Siemens SIWAREX WP251 | 0 | — |
| Siemens SIWAREX WP521 ST | 0 | — |
| Siemens SIWAREX WP522 ST | 0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.