cve/2022/CVE-2022-25622.md

115 lines
11 KiB
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-25622](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25622)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20CFU%20DIQ&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20CFU%20PA&color=blue)
2024-06-22 09:37:59 +00:00
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200AL%20IM%20157-1%20PN&color=blue)
2024-07-25 21:25:12 +00:00
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200MP%20IM%20155-5%20PN%20HF&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200S%20IM%20151-8%20PN%2FDP%20CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200S%20IM%20151-8F%20PN%2FDP%20CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200SP%20IM%20155-6%20MF%20HF&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200SP%20IM%20155-6%20PN%20HA%20(incl.%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200SP%20IM%20155-6%20PN%20HF&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200SP%20IM%20155-6%20PN%2F2%20HF&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200SP%20IM%20155-6%20PN%2F3%20HF&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200pro%20IM%20154-8%20PN%2FDP%20CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200pro%20IM%20154-8F%20PN%2FDP%20CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET%20200pro%20IM%20154-8FX%20PN%2FDP%20CPU&color=blue)
2024-05-25 21:48:12 +02:00
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20AI%208xRTD%2FTC%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20CM%204x%20IO-Link%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20CM%208x%20IO-Link%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20DI%2016x24VDC%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20DI%208x24VDC%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20DIQ%2016x24VDC%2F2A%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20DQ%208x24VDC%2F0%2C5A%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20ET200ecoPN%2C%20DQ%208x24VDC%2F2A%2C%20M12-L&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PN%2FMF%20Coupler&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20PN%2FPN%20Coupler&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-1500%20CPU%20family%20(incl.%20related%20ET200%20CPUs%20and%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20314C-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20315-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20315F-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20315T-3%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20317-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20317F-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20317T-3%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20317TF-3%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20319-3%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-300%20CPU%20319F-3%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-400%20CPU%20412-2%20PN%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-400%20CPU%20414-3%20PN%2FDP%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-400%20CPU%20414F-3%20PN%2FDP%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-400%20CPU%20416-3%20PN%2FDP%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-400%20CPU%20416F-3%20PN%2FDP%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-400%20H%20V6%20CPU%20family%20(incl.%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-410%20V10%20CPU%20family%20(incl.%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20S7-410%20V8%20CPU%20family%20(incl.%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20TDC%20CP51M1&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20TDC%20CPU555&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20WinAC%20RTX%202010&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIMATIC%20WinAC%20RTX%20F%202010&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20DCM&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20G110M&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20G115D&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20G120%20(incl.%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20G130&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20G150&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20S110&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20S120%20(incl.%20SIPLUS%20variants)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20S150&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20S210%20(6SL5...)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SINAMICS%20V90&color=blue)
2024-07-25 21:25:12 +00:00
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200MP%20IM%20155-5%20PN%20HF%20T1%20RAIL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200MP%20IM%20155-5%20PN%20HF&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200S%20IM%20151-8%20PN%2FDP%20CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200S%20IM%20151-8F%20PN%2FDP%20CPU&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200SP%20IM%20155-6%20PN%20HF%20T1%20RAIL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200SP%20IM%20155-6%20PN%20HF%20TX%20RAIL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20ET%20200SP%20IM%20155-6%20PN%20HF&color=blue)
2024-05-25 21:48:12 +02:00
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20HCS4200%20CIM4210&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20HCS4200%20CIM4210C&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20HCS4300%20CIM4310&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20NET%20PN%2FPN%20Coupler&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-300%20CPU%20314C-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-300%20CPU%20315-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-300%20CPU%20315F-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-300%20CPU%20317-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-300%20CPU%20317F-2%20PN%2FDP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-400%20CPU%20414-3%20PN%2FDP%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SIPLUS%20S7-400%20CPU%20416-3%20PN%2FDP%20V7&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20%3C%20V10.1.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20%3C%20V2.0.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20%3C%20V3.2.19%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20%3C%20V3.3.19%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20%3E%3D%204.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20%3E%3D%20V5.1.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20All%20versions%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20*%20&color=brighgreen)
2024-07-25 21:25:12 +00:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V1.04.04%20&color=brighgreen)
2024-05-25 21:48:12 +02:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V1.1.10%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V1.2.1%20&color=brighgreen)
2024-07-25 21:25:12 +00:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V1.5%20SP1%20&color=brighgreen)
2024-06-22 09:37:59 +00:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V2.0.0%20&color=brighgreen)
2024-05-25 21:48:12 +02:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V4.7%20SP14%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V4.7.14%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V5.2%20SP3%20HF13%20&color=brighgreen)
2024-06-22 09:37:59 +00:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V5.2%20SP3%20HF18%20&color=brighgreen)
2024-05-25 21:48:12 +02:00
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V5.2.3.13%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V6.0.10%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%20V8.2.3%20&color=brighgreen)
2024-07-25 21:25:12 +00:00
![](https://img.shields.io/static/v1?label=Version&message=V4.2.0%3C%20*%20&color=brighgreen)
2024-05-25 21:48:12 +02:00
![](https://img.shields.io/static/v1?label=Version&message=V5.1.1%3C%20V5.1.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=V5.1.1%3C%20V5.1.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%3A%20Uncontrolled%20Resource%20Consumption&color=brighgreen)
### Description
2024-07-25 21:25:12 +00:00
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
2024-05-25 21:48:12 +02:00
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Live-Hack-CVE/CVE-2022-25622