CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-25622
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:simatic_cfu_diq_firmware
- siemens:simatic_cfu_pa_firmware
- siemens:simatic_s7-1500_cpu_firmware
- siemens:simatic_s7-300_cpu_firmware
- siemens:simatic_s7-400_pn\/dp_v7_firmware
- siemens:simatic_s7-400h_v6_firmware
- siemens:simatic_s7-410_v10_firmware
- siemens:simatic_s7-410_v8_firmware
- siemens:simatic_tdc_cp51m1_firmware
- siemens:simatic_tdc_cpu555_firmware
- siemens:simatic_winac_rtx_firmware
- siemens:simit_simulation_platform