Skip to content
OpenAdvisories
High ICSA-25-352-05 1 CVE

Siemens Interniche IP-Stack

Published Dec 9, 2025 · Updated Dec 18, 2025 · Revision 2

Vendor: Siemens Product: SIDOOR ATD430W Product: SIDOOR ATE530G COATED (6FB1221-5SM10-7BP0) Product: SIDOOR ATE530S COATED Product: SIMATIC CFU DIQ (6ES7655-5PX31-1XX0) Product: SIMATIC CFU PA (6ES7655-5PX11-0XX0) Product: SIMATIC CFU PA (6ES7655-5PX11-1XX0) Product: SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Product: SIMATIC ET 200clean, CM 8x IO-Link (6ES7148-7JH00-0BB0) Product: SIMATIC ET 200clean, DI 16x24VDC (6ES7141-7BH00-0BB0) Product: SIMATIC ET 200clean, DIQ 16x24VDC/0,5A (6ES7143-7BH00-0BB0) Product: SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L (6ES7144-6JF00-0BB0) Product: SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0) Product: SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) Product: SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0) Product: SIMATIC ET 200eco PN, DI 16x24VDC, M12-L (6ES7141-6BH00-0BB0) Product: SIMATIC ET 200eco PN, DI 8x24VDC, M12-L (6ES7141-6BG00-0BB0) Product: SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L (6ES7143-6BH00-0BB0) Product: SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L (6ES7142-6BG00-0BB0) Product: SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L (6ES7142-6BR00-0BB0) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0) +121 more

Summary

Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #2

    Initial Republication of Siemens ProductCERT SSA-915282 advisory

  2. #1

    Publication Date

References