The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the mi

Summary

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

Timeline

1. Apr 12, 2022, 12:00 AM UTCCVE published
2. Apr 18, 2025, 3:12 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Apr 21, 2025, 1:54 PM UTCRecord last updated

Affected versions

• Siemens SIMATIC CFU DIQ

  fixed in V2.0.0

• Siemens SIMATIC CFU PA

  fixed in V2.0.0

• Siemens SIMATIC ET 200AL IM 157-1 PN

  All versions

• Siemens SIMATIC ET 200MP IM 155-5 PN HF

  From V4.2.0

• Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU

  All versions < V3.2.19

• Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU

  All versions < V3.2.19

• Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU

  All versions < V3.2.19

• Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU

  All versions < V3.2.19

• Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU

  All versions < V3.2.19

• Siemens SIMATIC ET 200SP IM 155-6 MF HF

  All versions

• Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

  All versions

• Siemens SIMATIC ET 200SP IM 155-6 PN HF

  From V4.2.0

• Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF

  From V4.2.0

• Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF

  From V4.2.0

• Siemens SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, DI 16x24VDC, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, DI 8x24VDC, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L

  From V5.1.1 · fixed in V5.1.3

• Siemens SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L

  From V5.1.1 · fixed in V5.1.2

• Siemens SIMATIC PN/MF Coupler

  All versions

• Siemens SIMATIC PN/PN Coupler

  All versions >= 4.2

• Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)

  All versions < V2.0.0

• Siemens SIMATIC S7-300 CPU 314C-2 PN/DP

  All versions < V3.3.19

• Siemens SIMATIC S7-300 CPU 315-2 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 315F-2 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 315T-3 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 317-2 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 317F-2 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 317T-3 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 319-3 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-300 CPU 319F-3 PN/DP

  All versions < V3.2.19

• Siemens SIMATIC S7-400 CPU 412-2 PN V7

  All versions

• Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

  fixed in V6.0.10

• Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

  All versions < V10.1.1

• Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

  fixed in V8.2.3

• Siemens SIMATIC TDC CP51M1

  fixed in V1.1.10

• Siemens SIMATIC TDC CPU555

  fixed in V1.2.1

• Siemens SIMATIC WinAC RTX 2010

  All versions

• Siemens SIMATIC WinAC RTX F 2010

  All versions

• Siemens SINAMICS DCM

  fixed in V1.5 SP1

• Siemens SINAMICS G110M

  fixed in V4.7.14

• Siemens SINAMICS G115D

  fixed in V4.7.14

• Siemens SINAMICS G120 (incl. SIPLUS variants)

  fixed in V4.7 SP14

• Siemens SINAMICS G130

  fixed in V5.2.3.13

• Siemens SINAMICS G150

  fixed in V5.2.3.13

• Siemens SINAMICS S110

  All versions

• Siemens SINAMICS S120 (incl. SIPLUS variants)

  fixed in V5.2 SP3 HF13

• Siemens SINAMICS S150

  fixed in V5.2.3.13

• Siemens SINAMICS S210 (6SL5...)

  fixed in V5.2 SP3 HF18

• Siemens SINAMICS V90

  fixed in V1.04.04

• Siemens SIPLUS ET 200MP IM 155-5 PN HF

  From V4.2.0

• Siemens SIPLUS ET 200MP IM 155-5 PN HF

  From V4.2.0

• Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL

  From V4.2.0

• Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU

  All versions < V3.2.19

• Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU

  All versions < V3.2.19

• Siemens SIPLUS ET 200SP IM 155-6 PN HF

  From V4.2.0

• Siemens SIPLUS ET 200SP IM 155-6 PN HF

  From V4.2.0

• Siemens SIPLUS ET 200SP IM 155-6 PN HF

  From V4.2.0

• Siemens SIPLUS ET 200SP IM 155-6 PN HF

  From V4.2.0

• Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL

  From V4.2.0

• Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL

  From V4.2.0

• Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL

  From V4.2.0

• Siemens SIPLUS HCS4200 CIM4210

  All versions

• Siemens SIPLUS HCS4200 CIM4210C

  All versions

• Siemens SIPLUS HCS4300 CIM4310

  All versions

• Siemens SIPLUS NET PN/PN Coupler

  All versions >= 4.2

• Siemens SIPLUS S7-300 CPU 314C-2 PN/DP

  All versions < V3.3.19

• Siemens SIPLUS S7-300 CPU 315-2 PN/DP

  All versions < V3.2.19

• Siemens SIPLUS S7-300 CPU 315F-2 PN/DP

  All versions < V3.2.19

• Siemens SIPLUS S7-300 CPU 317-2 PN/DP

  All versions < V3.2.19

• Siemens SIPLUS S7-300 CPU 317F-2 PN/DP

  All versions < V3.2.19

• Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7

  All versions

• Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7

  All versions

References 2