← Database

CVE-2022-25622

MEDIUM CVSS: 5.3 Published: 2022-04-12 Modified: 2026-06-17

Description

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

Affected Platforms

Siemens Simatic S7-1500 CpuSiemens Simatic Cfu PaSiemens Simatic S7-410 V10 FirmwareSiemens Simatic S7-410 V8 FirmwareSiemens Simit Simulation PlatformSiemens Simatic S7-1500 Cpu FirmwareSiemens Simatic S7-400H V6 FirmwareSiemens Simatic S7-400 Pn\/Dp V7 FirmwareSiemens Simatic Winac RtxSiemens Simatic Tdc Cp51M1 Firmware

Weakness Type

CWE-400, CWE-400

References