high
7.5
CWE
400
Advisory Published
Updated

CVE-2022-25622

First published: Tue Apr 12 2022(Updated: )

A vulnerability has been identified in SIMATIC CFU DIQ, SIMATIC CFU PA, SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET200AL IM157-1 PN, SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L, SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L, SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L, SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L, SIMATIC ET200ecoPN, DI 16x24VDC, M12-L, SIMATIC ET200ecoPN, DI 8x24VDC, M12-L, SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L, SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L, SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L, SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 MF HF, SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants), SIMATIC PN/MF Coupler, SIMATIC PN/PN Coupler, SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 CPU 412-2 PN V7, SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SINAMICS DCM, SINAMICS G110M, SINAMICS G115D, SINAMICS G120 (incl. SIPLUS variants), SINAMICS G130, SINAMICS G150, SINAMICS S110, SINAMICS S120 (incl. SIPLUS variants), SINAMICS S150, SINAMICS S210, SINAMICS V90, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS HCS4200 CIM4210, SIPLUS HCS4200 CIM4210C, SIPLUS HCS4300 CIM4310, SIPLUS NET PN/PN Coupler, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP, SIPLUS S7-400 CPU 414-3 PN/DP V7, SIPLUS S7-400 CPU 416-3 PN/DP V7. The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

Credit: productcert@siemens.com productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens Simatic Cfu Diq Firmware
Siemens Simatic Cfu Diq
Siemens Simatic Cfu Pa Firmware
Siemens Simatic Cfu Pa
Siemens Simatic S7-300 Cpu Firmware
Siemens SIMATIC S7-300 CPU
Siemens Simatic S7-400h V6 Firmware
Siemens Simatic S7-400h V6
Siemens Simatic S7-400 Pn\/dp V7 Firmware
Siemens Simatic S7-400 Pn\/dp V7
Siemens Simatic S7-410 V8 Firmware
Siemens Simatic S7-410 V8
Siemens Simatic S7-410 V10 Firmware
Siemens Simatic S7-410 V10
Siemens Simatic S7-1500 Cpu Firmware<2.0.0
Siemens Simatic S7-1500 Cpu
Siemens Simatic Tdc Cp51m1 Firmware
Siemens Simatic Tdc Cp51m1
Siemens Simatic Tdc Cpu555 Firmware
Siemens Simatic Tdc Cpu555
Siemens Simatic Winac Rtx Firmware
Siemens Simatic Winac Rtx
Siemens Simit Simulation Platform
All of
Siemens Simatic Cfu Diq
Siemens Simatic Cfu Diq Firmware
All of
Siemens Simatic Cfu Pa
Siemens Simatic Cfu Pa Firmware
All of
Siemens SIMATIC S7-300 CPU
Siemens Simatic S7-300 Cpu Firmware
All of
Siemens Simatic S7-400h V6
Siemens Simatic S7-400h V6 Firmware
All of
Siemens Simatic S7-400 Pn\/dp V7
Siemens Simatic S7-400 Pn\/dp V7 Firmware
All of
Siemens Simatic S7-410 V8
Siemens Simatic S7-410 V8 Firmware
All of
Siemens Simatic S7-410 V10
Siemens Simatic S7-410 V10 Firmware
All of
Siemens Simatic S7-1500 Cpu
Siemens Simatic S7-1500 Cpu Firmware<2.0.0
All of
Siemens Simatic Tdc Cp51m1 Firmware
Siemens Simatic Tdc Cp51m1
All of
Siemens Simatic Tdc Cpu555 Firmware
Siemens Simatic Tdc Cpu555
All of
Siemens Simatic Winac Rtx Firmware
Siemens Simatic Winac Rtx

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2022-25622?

    CVE-2022-25622 is a vulnerability identified in SIMATIC CFU DIQ, SIMATIC CFU PA, SIMATIC ET 200pro, SIMATIC ET 200S, SIMATIC ET200AL, and SIMATIC ET200ec devices.

  • How severe is CVE-2022-25622?

    CVE-2022-25622 has a severity rating of 7.5 (High).

  • Which software is affected by CVE-2022-25622?

    The affected software includes Siemens Simatic CFU DIQ firmware, Siemens Simatic CFU PA firmware, Siemens Simatic S7-300 CPU firmware, Siemens Simatic S7-400h V6 firmware, Siemens Simatic S7-400 Pn/dp V7 firmware, Siemens Simatic S7-410 V8 firmware, Siemens Simatic S7-410 V10 firmware, Siemens Simatic S7-1500 CPU firmware (up to exclusive version 2.0.0), Siemens Simatic Tdc Cp51m1 firmware, Siemens Simatic Tdc Cpu555 firmware, and Siemens Simatic Winac Rtx firmware.

  • How can I fix CVE-2022-25622?

    To fix CVE-2022-25622, it is recommended to apply the necessary software updates provided by Siemens to patch the identified vulnerabilities.

  • Where can I find more information about CVE-2022-25622?

    More information about CVE-2022-25622 can be found in the reference link: https://cert-portal.siemens.com/productcert/pdf/ssa-446448.pdf

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203