Uncontrolled resource consumption in Siemens SIMATIC CFU DIQ
Priority MEDIUM 41CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-400.
Summary
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00901 59th percentileScored 2026-11-07
Fix Fixed SIMATIC CFU DIQ (Siemens): V2.0.0SIMATIC CFU PA (Siemens): V2.0.0+46 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CFU DIQ | before V2.0.0 | V2.0.0 | Patch available | CNA |
| Siemens | SIMATIC CFU PA | before V2.0.0 | V2.0.0 | Patch available | CNA |
| Siemens | SIMATIC ET 200AL IM 157-1 PN | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200MP IM 155-5 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200pro IM 154-8 PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM 154-8F PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM 154-8FX PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC ET 200S IM 151-8 PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC ET 200S IM 151-8F PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 MF HF | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN/2 HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200SP IM 155-6 PN/3 HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, DI 16x24VDC, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, DI 8x24VDC, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L | V5.1.1 to before V5.1.3 | V5.1.3 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L | V5.1.1 to before V5.1.2 | V5.1.2 | Patch available | CNA |
| Siemens | SIMATIC PN/MF Coupler | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC PN/PN Coupler | All versions >= 4.2 | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | before V2.0.0 | V2.0.0 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 314C-2 PN/DP | before V3.3.19 | V3.3.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315F-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315T-3 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317F-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317T-3 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317TF-3 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 319-3 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 319F-3 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIMATIC S7-400 CPU 412-2 PN V7 | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-400 CPU 414-3 PN/DP V7 | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-400 CPU 414F-3 PN/DP V7 | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-400 CPU 416-3 PN/DP V7 | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-400 CPU 416F-3 PN/DP V7 | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) | before V6.0.10 | V6.0.10 | Patch available | CNA |
| Siemens | SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) | before V10.1.1 | V10.1.1 | Patch available | CNA |
| Siemens | SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) | before V8.2.3 | V8.2.3 | Patch available | CNA |
| Siemens | SIMATIC TDC CP51M1 | before V1.1.10 | V1.1.10 | Patch available | CNA |
| Siemens | SIMATIC TDC CPU555 | before V1.2.1 | V1.2.1 | Patch available | CNA |
| Siemens | SIMATIC WinAC RTX 2010 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC WinAC RTX F 2010 | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS DCM | before V1.5 SP1 | V1.5 SP1 | Patch available | CNA |
| Siemens | SINAMICS G110M | before V4.7.14 | V4.7.14 | Patch available | CNA |
| Siemens | SINAMICS G115D | before V4.7.14 | V4.7.14 | Patch available | CNA |
| Siemens | SINAMICS G120 (incl. SIPLUS variants) | before V4.7 SP14 | V4.7 SP14 | Patch available | CNA |
| Siemens | SINAMICS G130 | before V5.2.3.13 | V5.2.3.13 | Patch available | CNA |
| Siemens | SINAMICS G150 | before V5.2.3.13 | V5.2.3.13 | Patch available | CNA |
| Siemens | SINAMICS S110 | all versions | — | No fix listed | CNA |
| Siemens | SINAMICS S120 (incl. SIPLUS variants) | before V5.2 SP3 HF13 | V5.2 SP3 HF13 | Patch available | CNA |
| Siemens | SINAMICS S150 | before V5.2.3.13 | V5.2.3.13 | Patch available | CNA |
| Siemens | SINAMICS S210 (6SL5...) | before V5.2 SP3 HF18 | V5.2 SP3 HF18 | Patch available | CNA |
| Siemens | SINAMICS V90 | before V1.04.04 | V1.04.04 | Patch available | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200S IM 151-8 PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIPLUS ET 200S IM 151-8F PN/DP CPU | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200SP IM 155-6 PN HF TX RAIL | V4.2.0 and later | — | No fix listed | CNA |
| Siemens | SIPLUS HCS4200 CIM4210 | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS HCS4200 CIM4210C | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS HCS4300 CIM4310 | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS NET PN/PN Coupler | All versions >= 4.2 | — | No fix listed | CNA |
| Siemens | SIPLUS S7-300 CPU 314C-2 PN/DP | before V3.3.19 | V3.3.19 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 315-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 315F-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 317-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 317F-2 PN/DP | before V3.2.19 | V3.2.19 | Patch available | CNA |
| Siemens | SIPLUS S7-400 CPU 414-3 PN/DP V7 | all versions | — | No fix listed | CNA |
| Siemens | SIPLUS S7-400 CPU 416-3 PN/DP V7 | all versions | — | No fix listed | CNA |
- SIMATIC CFU DIQ VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
- SIMATIC CFU PA VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
- SIMATIC ET 200AL IM 157-1 PN VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET 200MP IM 155-5 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIMATIC ET 200pro IM 154-8 PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC ET 200pro IM 154-8F PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC ET 200pro IM 154-8FX PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC ET 200S IM 151-8 PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC ET 200S IM 151-8F PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC ET 200SP IM 155-6 MF HF VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET 200SP IM 155-6 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIMATIC ET 200SP IM 155-6 PN/2 HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIMATIC ET 200SP IM 155-6 PN/3 HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, DI 16x24VDC, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, DI 8x24VDC, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L VendorSiemens Affected V5.1.1 to before V5.1.3 Fixed in V5.1.3 Patch available CNA
- SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L VendorSiemens Affected V5.1.1 to before V5.1.2 Fixed in V5.1.2 Patch available CNA
- SIMATIC PN/MF Coupler VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC PN/PN Coupler VendorSiemens Affected All versions >= 4.2 Fixed in — No fix listed CNA
- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) VendorSiemens Affected before V2.0.0 Fixed in V2.0.0 Patch available CNA
- SIMATIC S7-300 CPU 314C-2 PN/DP VendorSiemens Affected before V3.3.19 Fixed in V3.3.19 Patch available CNA
- SIMATIC S7-300 CPU 315-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 315F-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 315T-3 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 317-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 317F-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 317T-3 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 317TF-3 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 319-3 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-300 CPU 319F-3 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIMATIC S7-400 CPU 412-2 PN V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC S7-400 CPU 414-3 PN/DP V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC S7-400 CPU 414F-3 PN/DP V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC S7-400 CPU 416-3 PN/DP V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC S7-400 CPU 416F-3 PN/DP V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) VendorSiemens Affected before V6.0.10 Fixed in V6.0.10 Patch available CNA
- SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) VendorSiemens Affected before V10.1.1 Fixed in V10.1.1 Patch available CNA
- SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) VendorSiemens Affected before V8.2.3 Fixed in V8.2.3 Patch available CNA
- SIMATIC TDC CP51M1 VendorSiemens Affected before V1.1.10 Fixed in V1.1.10 Patch available CNA
- SIMATIC TDC CPU555 VendorSiemens Affected before V1.2.1 Fixed in V1.2.1 Patch available CNA
- SIMATIC WinAC RTX 2010 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC WinAC RTX F 2010 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS DCM VendorSiemens Affected before V1.5 SP1 Fixed in V1.5 SP1 Patch available CNA
- SINAMICS G110M VendorSiemens Affected before V4.7.14 Fixed in V4.7.14 Patch available CNA
- SINAMICS G115D VendorSiemens Affected before V4.7.14 Fixed in V4.7.14 Patch available CNA
- SINAMICS G120 (incl. SIPLUS variants) VendorSiemens Affected before V4.7 SP14 Fixed in V4.7 SP14 Patch available CNA
- SINAMICS G130 VendorSiemens Affected before V5.2.3.13 Fixed in V5.2.3.13 Patch available CNA
- SINAMICS G150 VendorSiemens Affected before V5.2.3.13 Fixed in V5.2.3.13 Patch available CNA
- SINAMICS S110 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SINAMICS S120 (incl. SIPLUS variants) VendorSiemens Affected before V5.2 SP3 HF13 Fixed in V5.2 SP3 HF13 Patch available CNA
- SINAMICS S150 VendorSiemens Affected before V5.2.3.13 Fixed in V5.2.3.13 Patch available CNA
- SINAMICS S210 (6SL5...) VendorSiemens Affected before V5.2 SP3 HF18 Fixed in V5.2 SP3 HF18 Patch available CNA
- SINAMICS V90 VendorSiemens Affected before V1.04.04 Fixed in V1.04.04 Patch available CNA
- SIPLUS ET 200MP IM 155-5 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200MP IM 155-5 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200S IM 151-8 PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIPLUS ET 200S IM 151-8F PN/DP CPU VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIPLUS ET 200SP IM 155-6 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200SP IM 155-6 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200SP IM 155-6 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200SP IM 155-6 PN HF VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS ET 200SP IM 155-6 PN HF TX RAIL VendorSiemens Affected V4.2.0 and later Fixed in — No fix listed CNA
- SIPLUS HCS4200 CIM4210 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS HCS4200 CIM4210C VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS HCS4300 CIM4310 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS NET PN/PN Coupler VendorSiemens Affected All versions >= 4.2 Fixed in — No fix listed CNA
- SIPLUS S7-300 CPU 314C-2 PN/DP VendorSiemens Affected before V3.3.19 Fixed in V3.3.19 Patch available CNA
- SIPLUS S7-300 CPU 315-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIPLUS S7-300 CPU 315F-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIPLUS S7-300 CPU 317-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIPLUS S7-300 CPU 317F-2 PN/DP VendorSiemens Affected before V3.2.19 Fixed in V3.2.19 Patch available CNA
- SIPLUS S7-400 CPU 414-3 PN/DP V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIPLUS S7-400 CPU 416-3 PN/DP V7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 23
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cfu_diq_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cfu_diq:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cfu_pa_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cfu_pa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400h_v6_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400h_v6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400_pn\/dp_v7_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400_pn\/dp_v7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cfu_diq_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cfu_diq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cfu_pa_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cfu_pa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_cpu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400h_v6_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400h_v6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400_pn\/dp_v7_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400_pn\/dp_v7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 13 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_s7-410_v8_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-410_v8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-410_v10_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-410_v10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:* | before 2.0.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500_cpu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:simit_simulation_platform:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
- cpe:2.3:o:siemens:simatic_s7-410_v8_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-410_v8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-410_v10_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-410_v10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:* Versions before 2.0.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500_cpu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_tdc_cp51m1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_tdc_cp51m1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_tdc_cpu555_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_tdc_cpu555:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:simit_simulation_platform:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
Remediation
- Fix · CNA SIMATIC CFU DIQ (Siemens) Fixed in V2.0.0
- Fix · CNA SIMATIC CFU PA (Siemens) Fixed in V2.0.0
- Fix · CNA SIMATIC ET 200pro IM 154-8 PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC ET 200pro IM 154-8F PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC ET 200pro IM 154-8FX PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC ET 200S IM 151-8 PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC ET 200S IM 151-8F PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (Siemens) Fixed in V5.1.3
- Fix · CNA SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (Siemens) Fixed in V5.1.2
- Fix · CNA SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (Siemens) Fixed in V2.0.0
- Fix · CNA SIMATIC S7-300 CPU 314C-2 PN/DP (Siemens) Fixed in V3.3.19
- Fix · CNA SIMATIC S7-300 CPU 315-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 315F-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 315T-3 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 317-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 317F-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 317T-3 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 317TF-3 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 319-3 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-300 CPU 319F-3 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (Siemens) Fixed in V6.0.10
- Fix · CNA SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (Siemens) Fixed in V10.1.1
- Fix · CNA SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (Siemens) Fixed in V8.2.3
- Fix · CNA SIMATIC TDC CP51M1 (Siemens) Fixed in V1.1.10
- Fix · CNA SIMATIC TDC CPU555 (Siemens) Fixed in V1.2.1
- Fix · CNA SINAMICS DCM (Siemens) Fixed in V1.5 SP1
- Fix · CNA SINAMICS G110M (Siemens) Fixed in V4.7.14
- Fix · CNA SINAMICS G115D (Siemens) Fixed in V4.7.14
- Fix · CNA SINAMICS G120 (incl. SIPLUS variants) (Siemens) Fixed in V4.7 SP14
- Fix · CNA SINAMICS G130 (Siemens) Fixed in V5.2.3.13
- Fix · CNA SINAMICS G150 (Siemens) Fixed in V5.2.3.13
- Fix · CNA SINAMICS S120 (incl. SIPLUS variants) (Siemens) Fixed in V5.2 SP3 HF13
- Fix · CNA SINAMICS S150 (Siemens) Fixed in V5.2.3.13
- Fix · CNA SINAMICS S210 (6SL5...) (Siemens) Fixed in V5.2 SP3 HF18
- Fix · CNA SINAMICS V90 (Siemens) Fixed in V1.04.04
- Fix · CNA SIPLUS ET 200S IM 151-8 PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIPLUS ET 200S IM 151-8F PN/DP CPU (Siemens) Fixed in V3.2.19
- Fix · CNA SIPLUS S7-300 CPU 314C-2 PN/DP (Siemens) Fixed in V3.3.19
- Fix · CNA SIPLUS S7-300 CPU 315-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIPLUS S7-300 CPU 315F-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIPLUS S7-300 CPU 317-2 PN/DP (Siemens) Fixed in V3.2.19
- Fix · CNA SIPLUS S7-300 CPU 317F-2 PN/DP (Siemens) Fixed in V3.2.19
Timeline
- 2026-10-02 Threatist record created from CVE-2022-25622
- 2026-10-03 Alias added: GHSA-pgxc-2q22-7c2f
References
Sources
- CVE-2022-25622 · CVE Program
- CVE-2022-25622 · NVD
- FIRST EPSS
- GHSA-pgxc-2q22-7c2f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences