Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Siemens SIDOOR ATD430W

CVE-2024-23814
MEDIUM 6.9

At a glance

Source
NVD
EPSS
EPSS 0.62 % · percentile 50 ()
State
PUBLISHED
Published
Updated
Assigner
siemens
NVD status
Deferred

Search on…

Description

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Weaknesses (CWE)

  • CWE-400 — Uncontrolled Resource Consumption

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:Csiemens
CVSS 4.0MEDIUM 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:Nsiemens
CVSS 4.0MEDIUM 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · productcert@siemens.com (Secondary)
CVSS 3.1MEDIUM 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LNVD · productcert@siemens.com (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Siemens · SIDOOR ATD430Waffected 0 < *
Siemens · SIDOOR ATE530G COATEDaffected 0 < *
Siemens · SIDOOR ATE530S COATEDaffected 0 < *
Siemens · SIMATIC CFU DIQaffected 0 < V2.0.0
Siemens · SIMATIC CFU PAaffected 0 < V2.0.0
Siemens · SIMATIC CFU PAaffected 0 < V2.0
Siemens · SIMATIC ET 200AL IM 157-1 PNaffected 0 < *
Siemens · SIMATIC ET 200M IM 153-4 PN IO HFaffected 0 < *
Siemens · SIMATIC ET 200M IM 153-4 PN IO STaffected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN BAaffected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN HFaffected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN STaffected 0 < *
Siemens · SIMATIC ET 200MP IM 155-5 PN STaffected 0 < *
Siemens · SIMATIC ET 200pro IM 154-3 PN HFaffected 0 < *
Siemens · SIMATIC ET 200pro IM 154-4 PN HFaffected 0 < *
Siemens · SIMATIC ET 200pro IM 154-8 PN/DP CPUaffected 0 < *
Siemens · SIMATIC ET 200pro IM 154-8F PN/DP CPUaffected 0 < *
Siemens · SIMATIC ET 200pro IM 154-8FX PN/DP CPUaffected 0 < *
Siemens · SIMATIC ET 200S IM 151-3 PN FOaffected 0 < *
Siemens · SIMATIC ET 200S IM 151-3 PN HFaffected 0 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD