CVE-2024-23814

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

Score
CVSS 4.0 6.9 Medium
Status
Deferred - productcert@siemens.com
Published
2025-02-11
Last modified
2025-07-10
Weaknesses
CWE-400

Affected products

References

 
 
© AVABIS GmbH privacypolicy about