CVE-2024-23814

Tuesday, February 11, 2025

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Summary

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Affected Software

Vendor	Product	Version Range	Status
Siemens	SIDOOR ATD430W	`0 < *`	affected
Siemens	SIDOOR ATE530G COATED	`0 < *`	affected
Siemens	SIDOOR ATE530S COATED	`0 < *`	affected
Siemens	SIMATIC CFU DIQ	`0 < V2.0.0`	affected
Siemens	SIMATIC CFU PA	`0 < V2.0.0`	affected
Siemens	SIMATIC CFU PA	`0 < V2.0`	affected
Siemens	SIMATIC ET 200AL IM 157-1 PN	`0 < *`	affected
Siemens	SIMATIC ET 200M IM 153-4 PN IO HF	`0 < *`	affected
Siemens	SIMATIC ET 200M IM 153-4 PN IO ST	`0 < *`	affected
Siemens	SIMATIC ET 200MP IM 155-5 PN BA	`0 < *`	affected
Siemens	SIMATIC ET 200MP IM 155-5 PN HF	`0 < *`	affected
Siemens	SIMATIC ET 200MP IM 155-5 PN ST	`0 < *`	affected
Siemens	SIMATIC ET 200MP IM 155-5 PN ST	`0 < *`	affected
Siemens	SIMATIC ET 200pro IM 154-3 PN HF	`0 < *`	affected
Siemens	SIMATIC ET 200pro IM 154-4 PN HF	`0 < *`	affected
Siemens	SIMATIC ET 200pro IM 154-8 PN/DP CPU	`0 < *`	affected
Siemens	SIMATIC ET 200pro IM 154-8F PN/DP CPU	`0 < *`	affected
Siemens	SIMATIC ET 200pro IM 154-8FX PN/DP CPU	`0 < *`	affected
Siemens	SIMATIC ET 200S IM 151-3 PN FO	`0 < *`	affected
Siemens	SIMATIC ET 200S IM 151-3 PN HF	`0 < *`	affected
Siemens	SIMATIC ET 200S IM 151-3 PN HS	`0 < *`	affected
Siemens	SIMATIC ET 200S IM 151-3 PN ST	`0 < *`	affected
Siemens	SIMATIC ET 200S IM 151-8 PN/DP CPU	`0 < *`	affected
Siemens	SIMATIC ET 200S IM 151-8F PN/DP CPU	`0 < *`	affected
Siemens	SIMATIC ET 200SP CPU 1510SP F-1 PN	`0 < *`	affected
Siemens	SIMATIC ET 200SP CPU 1510SP-1 PN	`0 < *`	affected
Siemens	SIMATIC ET 200SP CPU 1512SP F-1 PN	`0 < *`	affected
Siemens	SIMATIC ET 200SP CPU 1512SP-1 PN	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 MF HF	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN BA	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)	`0 < V1.3`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN HF	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN HS	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN ST	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN ST	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN ST BA	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN ST BA	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN/2 HF	`0 < *`	affected
Siemens	SIMATIC ET 200SP IM 155-6 PN/3 HF	`0 < *`	affected
Siemens	SIMATIC PN/PN Coupler	`0 < V6.0.0`	affected
Siemens	SIMATIC Power Line Booster PLB, Base Module	`0 < *`	affected
Siemens	SIMATIC Power Line Booster PLB, Modem Module ST	`0 < *`	affected
Siemens	SIMATIC S7-1200 CPU 1211C AC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1211C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1211C DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1212C AC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1212C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1212C DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1212FC DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1212FC DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1214C AC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1214C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1214C DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1214FC DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1214FC DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1215C AC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1215C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1215C DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1215FC DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1215FC DC/DC/Rly	`0 < V4.4`	affected
Siemens	SIMATIC S7-1200 CPU 1217C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIMATIC S7-1500 CPU 1511-1 PN	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1511F-1 PN	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1513-1 PN	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1513F-1 PN	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1515-2 PN	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1515F-2 PN	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1516-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-1500 CPU 1516F-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 314C-2 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 315-2 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 315F-2 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 315T-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 317-2 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 317F-2 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 317T-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 317TF-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 319-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-300 CPU 319F-3 PN/DP	`0 < *`	affected
Siemens	SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)	`0 < *`	affected
Siemens	SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)	`0 < *`	affected
Siemens	SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)	`0 < V10.2`	affected
Siemens	SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)	`0 < V8.3`	affected
Siemens	SIMATIC TDC CP51M1	`0 < *`	affected
Siemens	SIMATIC TDC CPU555	`0 < *`	affected
Siemens	SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)	`0 < *`	affected
Siemens	SIMOCODE pro V PROFINET	`0 < *`	affected
Siemens	SINUMERIK 840D sl	`0 < *`	affected
Siemens	SIPLUS ET 200M IM 153-4 PN IO HF	`0 < *`	affected
Siemens	SIPLUS ET 200M IM 153-4 PN IO ST	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN ST	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN ST	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN ST TX RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200MP IM 155-5 PN ST TX RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200S IM 151-8 PN/DP CPU	`0 < *`	affected
Siemens	SIPLUS ET 200S IM 151-8F PN/DP CPU	`0 < *`	affected
Siemens	SIPLUS ET 200S IM151-3 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200S IM151-3 PN ST	`0 < *`	affected
Siemens	SIPLUS ET 200SP CPU 1512SP F-1 PN	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN HF TX RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST BA	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST BA	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST TX RAIL	`0 < *`	affected
Siemens	SIPLUS ET 200SP IM 155-6 PN ST TX RAIL	`0 < *`	affected
Siemens	SIPLUS HCS4200 CIM4210	`0 < *`	affected
Siemens	SIPLUS HCS4200 CIM4210C	`0 < *`	affected
Siemens	SIPLUS HCS4300 CIM4310	`0 < *`	affected
Siemens	SIPLUS NET PN/PN Coupler	`0 < V6.0.0`	affected
Siemens	SIPLUS S7-1200 CPU 1212 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1212 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1212 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1212 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1212C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1212C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214FC DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1214FC DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 AC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215 DC/DC/RLY	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215C DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1200 CPU 1215FC DC/DC/DC	`0 < V4.4`	affected
Siemens	SIPLUS S7-1500 CPU 1511-1 PN	`0 < *`	affected
Siemens	SIPLUS S7-1500 CPU 1511F-1 PN	`0 < *`	affected
Siemens	SIPLUS S7-1500 CPU 1513-1 PN	`0 < *`	affected
Siemens	SIPLUS S7-1500 CPU 1513F-1 PN	`0 < *`	affected
Siemens	SIPLUS S7-1500 CPU 1516-3 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-1500 CPU 1516-3 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-1500 CPU 1516F-3 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-300 CPU 314C-2 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-300 CPU 315-2 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-300 CPU 315F-2 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-300 CPU 317-2 PN/DP	`0 < *`	affected
Siemens	SIPLUS S7-300 CPU 317F-2 PN/DP	`0 < *`	affected
Siemens	SIWAREX WP231	`0 < *`	affected
Siemens	SIWAREX WP241	`0 < *`	affected
Siemens	SIWAREX WP251	`0 < *`	affected
Siemens	SIWAREX WP521 ST	`0 < *`	affected
Siemens	SIWAREX WP522 ST	`0 < *`	affected

Weaknesses

CWE-400: CWE-400: Uncontrolled Resource Consumption

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.