Skip to content
OpenAdvisories
Medium SSA-725549 1 CVE

SSA-725549: Denial of Service of ICMP in Industrial Devices

Published Apr 8, 2025 · Updated Jul 21, 2025 · Revision 4

Vendor: Siemens Product: SIDOOR ATD430W Product: SIDOOR ATE530G COATED (6FB1221-5SM10-7BP0) Product: SIDOOR ATE530S COATED Product: SIMATIC CFU DIQ (6ES7655-5PX31-1XX0) Product: SIMATIC CFU PA (6ES7655-5PX11-0XX0) Product: SIMATIC CFU PA (6ES7655-5PX11-1XX0) Product: SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) Product: SIMATIC ET 200M IM 153-4 PN IO HF (6ES7153-4BA00-0XB0) Product: SIMATIC ET 200M IM 153-4 PN IO ST (6ES7153-4AA01-0XB0) Product: SIMATIC ET 200MP IM 155-5 PN BA (6ES7155-5AA00-0AA0) Product: SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) Product: SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA00-0AB0) Product: SIMATIC ET 200MP IM 155-5 PN ST (6ES7155-5AA01-0AB0) Product: SIMATIC ET 200pro IM 154-3 PN HF (6ES7154-3AB00-0AB0) Product: SIMATIC ET 200pro IM 154-4 PN HF (6ES7154-4AB10-0AB0) Product: SIMATIC ET 200pro IM 154-8 PN/DP CPU (6ES7154-8AB01-0AB0) Product: SIMATIC ET 200pro IM 154-8F PN/DP CPU (6ES7154-8FB01-0AB0) Product: SIMATIC ET 200pro IM 154-8FX PN/DP CPU (6ES7154-8FX00-0AB0) Product: SIMATIC ET 200S IM 151-3 PN FO (6ES7151-3BB23-0AB0) Product: SIMATIC ET 200S IM 151-3 PN HF (6ES7151-3BA23-0AB0) Product: SIMATIC ET 200S IM 151-3 PN HS (6ES7151-3BA60-0AB0) Product: SIMATIC ET 200S IM 151-3 PN ST (6ES7151-3AA23-0AB0) Product: SIMATIC ET 200S IM 151-8 PN/DP CPU (6ES7151-8AB01-0AB0) Product: SIMATIC ET 200S IM 151-8F PN/DP CPU (6ES7151-8FB01-0AB0) Product: SIMATIC ET 200SP CPU 1510SP F-1 PN (6ES7510-1SJ00-0AB0) Product: SIMATIC ET 200SP CPU 1510SP-1 PN (6ES7510-1DJ00-0AB0) Product: SIMATIC ET 200SP CPU 1512SP F-1 PN (6ES7512-1SK00-0AB0) Product: SIMATIC ET 200SP CPU 1512SP-1 PN (6ES7512-1DK00-0AB0) Product: SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0) +121 more

Summary

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions.

The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through specially crafted ICMP packets. A successful attack will impact the availability of ICMP services on affected products for a limited time before it restores itself after the attack ceases.
Other communication services are not affected by this vulnerability.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #4

    Clarified that currently no fix is planned for SIPLUS S7-300 CPU devices

  2. #3

    Clarified fix version for SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0) and SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0): V6.0.0 or later version

  3. #2

    Added fix for SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0) and SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

  4. #1

    Publication Date

References