CVE-2022-25622

Description

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

Category

5.3
CVSS
Severity: Medium
CVSS 3.1 •
CVSS 2.0 •
EPSS 0.14%
Vendor Advisory siemens.com
Affected: Siemens SIMATIC CFU DIQ
Affected: Siemens SIMATIC CFU PA
Affected: Siemens SIMATIC ET 200AL IM 157-1 PN
Affected: Siemens SIMATIC ET 200MP IM 155-5 PN HF
Affected: Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU
Affected: Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU
Affected: Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU
Affected: Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU
Affected: Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU
Affected: Siemens SIMATIC ET 200SP IM 155-6 MF HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF
Affected: Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF
Affected: Siemens SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L
Affected: Siemens SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L
Affected: Siemens SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L
Affected: Siemens SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L
Affected: Siemens SIMATIC ET200ecoPN, DI 16x24VDC, M12-L
Affected: Siemens SIMATIC ET200ecoPN, DI 8x24VDC, M12-L
Affected: Siemens SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L
Affected: Siemens SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L
Affected: Siemens SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L
Affected: Siemens SIMATIC PN/MF Coupler
Affected: Siemens SIMATIC PN/PN Coupler
Affected: Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants)
Affected: Siemens SIMATIC S7-300 CPU 314C-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315F-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 315T-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317F-2 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317T-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 319-3 PN/DP
Affected: Siemens SIMATIC S7-300 CPU 319F-3 PN/DP
Affected: Siemens SIMATIC S7-400 CPU 412-2 PN V7
Affected: Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7
Affected: Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
Affected: Siemens SIMATIC TDC CP51M1
Affected: Siemens SIMATIC TDC CPU555
Affected: Siemens SIMATIC WinAC RTX 2010
Affected: Siemens SIMATIC WinAC RTX F 2010
Affected: Siemens SINAMICS DCM
Affected: Siemens SINAMICS G110M
Affected: Siemens SINAMICS G115D
Affected: Siemens SINAMICS G120 (incl. SIPLUS variants)
Affected: Siemens SINAMICS G130
Affected: Siemens SINAMICS G150
Affected: Siemens SINAMICS S110
Affected: Siemens SINAMICS S120 (incl. SIPLUS variants)
Affected: Siemens SINAMICS S150
Affected: Siemens SINAMICS S210 (6SL5...)
Affected: Siemens SINAMICS V90
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF
Affected: Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU
Affected: Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL
Affected: Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL
Affected: Siemens SIPLUS HCS4200 CIM4210
Affected: Siemens SIPLUS HCS4200 CIM4210C
Affected: Siemens SIPLUS HCS4300 CIM4310
Affected: Siemens SIPLUS NET PN/PN Coupler
Affected: Siemens SIPLUS S7-300 CPU 314C-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 315-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 315F-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 317-2 PN/DP
Affected: Siemens SIPLUS S7-300 CPU 317F-2 PN/DP
Affected: Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7
Affected: Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7
Published at:
Updated at:

References

Link Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-446448.pdf vendor advisory
https://cert-portal.siemens.com/productcert/html/ssa-446448.html

Frequently Asked Questions

What is the severity of CVE-2022-25622?
CVE-2022-25622 has been scored as a medium severity vulnerability.
How to fix CVE-2022-25622?
To fix CVE-2022-25622, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-25622 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2022-25622 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-25622?
CVE-2022-25622 affects Siemens SIMATIC CFU DIQ, Siemens SIMATIC CFU PA, Siemens SIMATIC ET 200AL IM 157-1 PN, Siemens SIMATIC ET 200MP IM 155-5 PN HF, Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU, Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU, Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU, Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU, Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU, Siemens SIMATIC ET 200SP IM 155-6 MF HF, Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants), Siemens SIMATIC ET 200SP IM 155-6 PN HF, Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF, Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF, Siemens SIMATIC ET200ecoPN, AI 8xRTD/TC, M12-L, Siemens SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L, Siemens SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L, Siemens SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L, Siemens SIMATIC ET200ecoPN, DI 16x24VDC, M12-L, Siemens SIMATIC ET200ecoPN, DI 8x24VDC, M12-L, Siemens SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L, Siemens SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L, Siemens SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L, Siemens SIMATIC PN/MF Coupler, Siemens SIMATIC PN/PN Coupler, Siemens SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), Siemens SIMATIC S7-300 CPU 314C-2 PN/DP, Siemens SIMATIC S7-300 CPU 315-2 PN/DP, Siemens SIMATIC S7-300 CPU 315F-2 PN/DP, Siemens SIMATIC S7-300 CPU 315T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317-2 PN/DP, Siemens SIMATIC S7-300 CPU 317F-2 PN/DP, Siemens SIMATIC S7-300 CPU 317T-3 PN/DP, Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP, Siemens SIMATIC S7-300 CPU 319-3 PN/DP, Siemens SIMATIC S7-300 CPU 319F-3 PN/DP, Siemens SIMATIC S7-400 CPU 412-2 PN V7, Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7, Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7, Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants), Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), Siemens SIMATIC TDC CP51M1, Siemens SIMATIC TDC CPU555, Siemens SIMATIC WinAC RTX 2010, Siemens SIMATIC WinAC RTX F 2010, Siemens SINAMICS DCM, Siemens SINAMICS G110M, Siemens SINAMICS G115D, Siemens SINAMICS G120 (incl. SIPLUS variants), Siemens SINAMICS G130, Siemens SINAMICS G150, Siemens SINAMICS S110, Siemens SINAMICS S120 (incl. SIPLUS variants), Siemens SINAMICS S150, Siemens SINAMICS S210 (6SL5...), Siemens SINAMICS V90, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF, Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL, Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU, Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL, Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL, Siemens SIPLUS HCS4200 CIM4210, Siemens SIPLUS HCS4200 CIM4210C, Siemens SIPLUS HCS4300 CIM4310, Siemens SIPLUS NET PN/PN Coupler, Siemens SIPLUS S7-300 CPU 314C-2 PN/DP, Siemens SIPLUS S7-300 CPU 315-2 PN/DP, Siemens SIPLUS S7-300 CPU 315F-2 PN/DP, Siemens SIPLUS S7-300 CPU 317-2 PN/DP, Siemens SIPLUS S7-300 CPU 317F-2 PN/DP, Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7, Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.