Siemens SIDOOR ATD430W

CVE-2024-23814

MEDIUM 6.9

At a glance

Source: NVD
EPSS: EPSS 0.62 % · percentile 50 (2026-11-01)
State: PUBLISHED
Published: 2025-02-11 10:28 UTC
Updated: 2025-07-10 10:53 UTC
Assigner: siemens
NVD status: Deferred

Search on…

Description

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Weaknesses (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C	siemens
CVSS 4.0	MEDIUM 6.9	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	siemens
CVSS 4.0	MEDIUM 6.9	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	MEDIUM 5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	NVD · productcert@siemens.com (Secondary)

European references

ENISA EUVD · EUVD-2024-21267
GCVE · GCVE-0-2024-23814

CERT-FR advisories

CERTFR-2025-AVI-0284 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
CERTFR-2025-AVI-0113 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Affected products

Product	Versions
Siemens · SIDOOR ATD430W	affected 0 < *
Siemens · SIDOOR ATE530G COATED	affected 0 < *
Siemens · SIDOOR ATE530S COATED	affected 0 < *
Siemens · SIMATIC CFU DIQ	affected 0 < V2.0.0
Siemens · SIMATIC CFU PA	affected 0 < V2.0.0
Siemens · SIMATIC CFU PA	affected 0 < V2.0
Siemens · SIMATIC ET 200AL IM 157-1 PN	affected 0 < *
Siemens · SIMATIC ET 200M IM 153-4 PN IO HF	affected 0 < *
Siemens · SIMATIC ET 200M IM 153-4 PN IO ST	affected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN BA	affected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN HF	affected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN ST	affected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN ST	affected 0 < *
Siemens · SIMATIC ET 200pro IM 154-3 PN HF	affected 0 < *
Siemens · SIMATIC ET 200pro IM 154-4 PN HF	affected 0 < *
Siemens · SIMATIC ET 200pro IM 154-8 PN/DP CPU	affected 0 < *
Siemens · SIMATIC ET 200pro IM 154-8F PN/DP CPU	affected 0 < *
Siemens · SIMATIC ET 200pro IM 154-8FX PN/DP CPU	affected 0 < *
Siemens · SIMATIC ET 200S IM 151-3 PN FO	affected 0 < *
Siemens · SIMATIC ET 200S IM 151-3 PN HF	affected 0 < *

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 Siemens SIDOOR ATD430W