CVE-2022-25622
A vulnerability has been identified in SIMATIC CFU DIQ (All versions), SIMATIC CFU PA (All...
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
- Record
CVE-2022-25622- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2022-30282
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
- Record
EUVD-2022-30282- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-pgxc-2q22-7c2f
A vulnerability has been identified in SIMATIC CFU DIQ (All versions), SIMATIC CFU PA (All...
A vulnerability has been identified in SIMATIC CFU DIQ (All versions), SIMATIC CFU PA (All versions), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0.0), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.10), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions), SIMATIC TDC CP51M1 (All versions), SIMATIC TDC CPU555 (All versions), SIMATIC WinAC RTX (All versions), SIMIT Simulation Platform (All versions). The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
- Record
GHSA-pgxc-2q22-7c2f- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
- Record
CVE-2022-25622- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
- siemens simatic cfu diq
- siemens simatic cfu pa
- siemens simatic et 200al im 157-1 pn
- siemens simatic et 200mp im 155-5 pn hf
- siemens simatic et 200pro im 154-8 pn/dp cpu
- siemens simatic et 200pro im 154-8f pn/dp cpu
- siemens simatic et 200pro im 154-8fx pn/dp cpu
- siemens simatic et 200s im 151-8 pn/dp cpu
- siemens simatic et 200s im 151-8f pn/dp cpu
- siemens simatic et 200sp im 155-6 mf hf
- siemens simatic et 200sp im 155-6 pn ha (incl. siplus variants)
- siemens simatic et 200sp im 155-6 pn hf
Show 76 moreShow less
- siemens simatic et 200sp im 155-6 pn/2 hf
- siemens simatic et 200sp im 155-6 pn/3 hf
- siemens simatic et200ecopn, ai 8xrtd/tc, m12-l
- siemens simatic et200ecopn, cm 4x io-link, m12-l
- siemens simatic et200ecopn, cm 8x io-link, m12-l
- siemens simatic et200ecopn, di 16x24vdc, m12-l
- siemens simatic et200ecopn, di 8x24vdc, m12-l
- siemens simatic et200ecopn, diq 16x24vdc/2a, m12-l
- siemens simatic et200ecopn, dq 8x24vdc/0,5a, m12-l
- siemens simatic et200ecopn, dq 8x24vdc/2a, m12-l
- siemens simatic pn/mf coupler
- siemens simatic pn/pn coupler
- siemens simatic s7-1500 cpu family (incl. related et200 cpus and siplus variants)
- siemens simatic s7-300 cpu 314c-2 pn/dp
- siemens simatic s7-300 cpu 315-2 pn/dp
- siemens simatic s7-300 cpu 315f-2 pn/dp
- siemens simatic s7-300 cpu 315t-3 pn/dp
- siemens simatic s7-300 cpu 317-2 pn/dp
- siemens simatic s7-300 cpu 317f-2 pn/dp
- siemens simatic s7-300 cpu 317t-3 pn/dp
- siemens simatic s7-300 cpu 317tf-3 pn/dp
- siemens simatic s7-300 cpu 319-3 pn/dp
- siemens simatic s7-300 cpu 319f-3 pn/dp
- siemens simatic s7-400 cpu 412-2 pn v7
- siemens simatic s7-400 cpu 414-3 pn/dp v7
- siemens simatic s7-400 cpu 414f-3 pn/dp v7
- siemens simatic s7-400 cpu 416-3 pn/dp v7
- siemens simatic s7-400 cpu 416f-3 pn/dp v7
- siemens simatic s7-400 h v6 cpu family (incl. siplus variants)
- siemens simatic s7-410 v10 cpu family (incl. siplus variants)
- siemens simatic s7-410 v8 cpu family (incl. siplus variants)
- siemens simatic tdc cp51m1
- siemens simatic tdc cpu555
- siemens simatic winac rtx 2010
- siemens simatic winac rtx f 2010
- siemens simatic cfu diq firmware
- siemens simatic cfu pa firmware
- siemens simatic s7-1500 cpu firmware
- siemens simatic s7-300 cpu firmware
- siemens simatic s7-400 pn\/dp v7 firmware
- siemens simatic s7-400h v6 firmware
- siemens simatic s7-410 v10 firmware
- siemens simatic s7-410 v8 firmware
- siemens simatic tdc cp51m1 firmware
- siemens simatic tdc cpu555 firmware
- siemens simatic winac rtx firmware
- siemens simit simulation platform
- siemens sinamics dcm
- siemens sinamics g110m
- siemens sinamics g115d
- siemens sinamics g120 (incl. siplus variants)
- siemens sinamics g130
- siemens sinamics g150
- siemens sinamics s110
- siemens sinamics s120 (incl. siplus variants)
- siemens sinamics s150
- siemens sinamics s210 (6sl5...)
- siemens sinamics v90
- siemens siplus et 200mp im 155-5 pn hf
- siemens siplus et 200mp im 155-5 pn hf t1 rail
- siemens siplus et 200s im 151-8 pn/dp cpu
- siemens siplus et 200s im 151-8f pn/dp cpu
- siemens siplus et 200sp im 155-6 pn hf
- siemens siplus et 200sp im 155-6 pn hf t1 rail
- siemens siplus et 200sp im 155-6 pn hf tx rail
- siemens siplus hcs4200 cim4210
- siemens siplus hcs4200 cim4210c
- siemens siplus hcs4300 cim4310
- siemens siplus net pn/pn coupler
- siemens siplus s7-300 cpu 314c-2 pn/dp
- siemens siplus s7-300 cpu 315-2 pn/dp
- siemens siplus s7-300 cpu 315f-2 pn/dp
- siemens siplus s7-300 cpu 317-2 pn/dp
- siemens siplus s7-300 cpu 317f-2 pn/dp
- siemens siplus s7-400 cpu 414-3 pn/dp v7
- siemens siplus s7-400 cpu 416-3 pn/dp v7
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-25622 is a medium vulnerability (CVSS 5.3) in Siemens Simatic Cfu Diq, published April 12, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. No source names a fixed version.