CVE-2024-23814

published 2025-02-11

CVE-2024-23814: The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted…

medium 6.9 CVSS 4.0

AV N AC L AT N PR N UI N VC N VI N VA L SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Affected

136 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	sidoor_atd430w	< *	*
siemens	sidoor_ate530g_coated	< *	*
siemens	sidoor_ate530s_coated	< *	*
siemens	simatic_cfu_diq	< V2.0.0	V2.0.0
siemens	simatic_cfu_pa	< V2.0.0	V2.0.0
siemens	simatic_cfu_pa	< V2.0	V2.0
siemens	simatic_et_200al_im_157-1_pn	< *	*
siemens	simatic_et_200m_im_153-4_pn_io_hf	< *	*
siemens	simatic_et_200m_im_153-4_pn_io_st	< *	*
siemens	simatic_et_200mp_im_155-5_pn_ba	< *	*
siemens	simatic_et_200mp_im_155-5_pn_hf	< *	*
siemens	simatic_et_200mp_im_155-5_pn_st	< *	*
siemens	simatic_et_200pro_im_154-3_pn_hf	< *	*
siemens	simatic_et_200pro_im_154-4_pn_hf	< *	*
siemens	simatic_et_200pro_im_154-8_pn_dp_cpu	< *	*
siemens	simatic_et_200pro_im_154-8f_pn_dp_cpu	< *	*
siemens	simatic_et_200pro_im_154-8fx_pn_dp_cpu	< *	*
siemens	simatic_et_200s_im_151-3_pn_fo	< *	*
siemens	simatic_et_200s_im_151-3_pn_hf	< *	*
siemens	simatic_et_200s_im_151-3_pn_hs	< *	*
siemens	simatic_et_200s_im_151-3_pn_st	< *	*
siemens	simatic_et_200s_im_151-8_pn_dp_cpu	< *	*
siemens	simatic_et_200s_im_151-8f_pn_dp_cpu	< *	*
siemens	simatic_et_200sp_cpu_1510sp-1_pn	< *	*
siemens	simatic_et_200sp_cpu_1510sp_f-1_pn	< *	*

CWE-400