Skip to content
Fencer Vulns
medium 5.3

CVE-2024-23814 json

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving…

published 2025-02-11 20 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-21267

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 50%
public exploits
0
none known

Summary

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Patch / fix

  • Siemens SIMATIC CFU DIQ V2.0.0
  • Siemens SIMATIC CFU PA V2.0, V2.0.0
  • Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) V1.3
  • Siemens SIMATIC PN/PN Coupler V6.0.0
  • Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC V4.4
  • Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC V4.4
  • Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC V4.4
  • Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC V4.4
  • Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly V4.4
  • Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC V4.4

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-105-03 updated cvss 5.3

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

  • Siemens SIDOOR ATD430W Siemens SIDOOR ATE530G COATED (6FB1221-5SM10-7BP0) Siemens SIDOOR ATE530S COATED
    affected: mitigation, no fix planned
  • Siemens SIMATIC CFU DIQ (6ES7655-5PX31-1XX0) < V2.0.0 Siemens SIMATIC CFU PA (6ES7655-5PX11-0XX0) < V2.0.0
    affected: fixed in V2.0.0, mitigation support.industry.siemens.com
  • Siemens SIMATIC CFU PA (6ES7655-5PX11-1XX0) < V2.0
    affected: fixed in V2.0, mitigation support.industry.siemens.com
  • Siemens SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Siemens SIMATIC ET 200M IM 153-4 PN IO HF (6ES7153-4BA00-0XB0) Siemens SIMATIC ET 200M IM 153-4 PN IO ST (6ES7153-4AA01-0XB0) Siemens SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0) Siemens SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Siemens SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0)
    +18 more products
    Siemens SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA01-0AB0) Siemens SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Siemens SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Siemens SIMATIC ET 200S IM 151-3 PN FO (6ES7151-3BB23-0AB0) Siemens SIMATIC ET 200S IM 151-3 PN HF (6ES7151-3BA23-0AB0) Siemens SIMATIC ET 200S IM 151-3 PN HS (6ES7151-3BA60-0AB0) Siemens SIMATIC ET 200S IM 151-3 PN ST (6ES7151-3AA23-0AB0) Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Siemens SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) Siemens SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0) Siemens SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0) Siemens SIMATIC ET 200SP IM 155-6 PN BA (6ES7155-6AR00-0AN0)
    affected: mitigation, no fix planned
  • Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) < V1.3
    affected: fixed in V1.3, mitigation
  • Siemens SIMATIC ET 200SP IM 155-6 PN HF (6ES7155-6AU00-0CN0) Siemens SIMATIC ET 200SP IM 155-6 PN HS (6ES7155-6AU00-0DN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU00-0BN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST (6ES7155-6AU01-0BN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA00-0BN0) Siemens SIMATIC ET 200SP IM 155-6 PN ST BA (6ES7155-6AA01-0BN0)
    +2 more products
    Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0) Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0)
    affected: mitigation, no fix planned
  • Siemens SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0) < V6.0.0
    affected: fixed in V6.0.0, mitigation support.industry.siemens.com

127 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-044-09 updated cvss 5.3

Siemens SCALANCE W700 IEEE 802.11ax

  • Siemens SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) <V3.0.0 Siemens SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) <V3.0.0 Siemens SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) <V3.0.0 Siemens SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) <V3.0.0 Siemens SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) <V3.0.0 Siemens SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) <V3.0.0
    +13 more products
    Siemens SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) <V3.0.0 Siemens SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) <V3.0.0 Siemens SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) <V3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) <V3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) <V3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) <V3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) <V3.0.0 Siemens SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) <V3.0.0 Siemens SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) <V3.0.0 Siemens SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) <V3.0.0
    affected: fixed in V3.0.0 support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
20 mo ago

Exploit prediction

0.62% chance of exploitation in the next 30 days, higher than 50% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
CNA 4.0 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CNA 4.0 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

  • Siemens SIDOOR ATD430W
  • Siemens SIDOOR ATE530G COATED
  • Siemens SIDOOR ATE530S COATED
  • Siemens SIMATIC CFU DIQ
  • Siemens SIMATIC CFU PA
  • Siemens SIMATIC ET 200AL IM 157-1 PN
  • Siemens SIMATIC ET 200M IM 153-4 PN IO HF
  • Siemens SIMATIC ET 200M IM 153-4 PN IO ST
  • Siemens SIMATIC ET 200MP IM 155-5 PN BA
  • Siemens SIMATIC ET 200MP IM 155-5 PN HF
  • Siemens SIMATIC ET 200MP IM 155-5 PN ST
  • Siemens SIMATIC ET 200pro IM 154-3 PN HF
  • Siemens SIMATIC ET 200pro IM 154-4 PN HF
  • Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU
  • Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU
  • Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU
  • Siemens SIMATIC ET 200S IM 151-3 PN FO
  • Siemens SIMATIC ET 200S IM 151-3 PN HF
  • Siemens SIMATIC ET 200S IM 151-3 PN HS
  • Siemens SIMATIC ET 200S IM 151-3 PN ST
  • Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU
  • Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU
  • Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN
  • Siemens SIMATIC ET 200SP CPU 1510SP-1 PN
  • Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN
  • Siemens SIMATIC ET 200SP CPU 1512SP-1 PN
  • Siemens SIMATIC ET 200SP IM 155-6 MF HF
  • Siemens SIMATIC ET 200SP IM 155-6 PN BA
  • Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)
  • Siemens SIMATIC ET 200SP IM 155-6 PN HF
  • Siemens SIMATIC ET 200SP IM 155-6 PN HS
  • Siemens SIMATIC ET 200SP IM 155-6 PN ST
  • Siemens SIMATIC ET 200SP IM 155-6 PN ST BA
  • Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF
  • Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF
  • Siemens SIMATIC PN/PN Coupler
  • Siemens SIMATIC Power Line Booster PLB, Base Module
  • Siemens SIMATIC Power Line Booster PLB, Modem Module ST
  • Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC
  • Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC
  • Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC
  • Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC
  • Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly
  • Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.