Log in Start free

Vulnerability · Published Feb 11, 2025 · Assigned by siemens

CVE-2024-23814

Medium 5.3

In plain English

A medium-severity uncontrolled resource consumption in SIDOOR ATD430W from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.6%top 50.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Affected products (as reported)

VendorProductVersions
Siemens SIDOOR ATD430W 0 – before *
Siemens SIDOOR ATE530G COATED 0 – before *
Siemens SIDOOR ATE530S COATED 0 – before *
Siemens SIMATIC CFU DIQ 0 – before V2.0.0
Siemens SIMATIC CFU PA 0 – before V2.0.0
Siemens SIMATIC CFU PA 0 – before V2.0
Siemens SIMATIC ET 200AL IM 157-1 PN 0 – before *
Siemens SIMATIC ET 200M IM 153-4 PN IO HF 0 – before *
Siemens SIMATIC ET 200M IM 153-4 PN IO ST 0 – before *
Siemens SIMATIC ET 200MP IM 155-5 PN BA 0 – before *
Siemens SIMATIC ET 200MP IM 155-5 PN HF 0 – before *
Siemens SIMATIC ET 200MP IM 155-5 PN ST 0 – before *
Siemens SIMATIC ET 200MP IM 155-5 PN ST 0 – before *
Siemens SIMATIC ET 200pro IM 154-3 PN HF 0 – before *
Siemens SIMATIC ET 200pro IM 154-4 PN HF 0 – before *
Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU 0 – before *
Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU 0 – before *
Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU 0 – before *
Siemens SIMATIC ET 200S IM 151-3 PN FO 0 – before *
Siemens SIMATIC ET 200S IM 151-3 PN HF 0 – before *
Siemens SIMATIC ET 200S IM 151-3 PN HS 0 – before *
Siemens SIMATIC ET 200S IM 151-3 PN ST 0 – before *
Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU 0 – before *
Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU 0 – before *
Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN 0 – before *
Siemens SIMATIC ET 200SP CPU 1510SP-1 PN 0 – before *
Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN 0 – before *
Siemens SIMATIC ET 200SP CPU 1512SP-1 PN 0 – before *
Siemens SIMATIC ET 200SP IM 155-6 MF HF 0 – before *
Siemens SIMATIC ET 200SP IM 155-6 PN BA 0 – before *

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

References