CVE-2024-23814Network attack vector

ICMP service interruption via fragment reassembly exhaustion

Published Feb 11, 2025 · Updated Jul 10, 2025

Uncontrolled resource consumption in Siemens industrial devices allows remote attackers to interrupt ICMP service with fragmented IP traffic. The integrated ICMP stack retains memory while reassembling specially crafted IP fragments until its available memory is exhausted. No authentication or user interaction is required; only ICMP is interrupted, and normal operation resumes after the traffic stops.

CVSS severity6.9

Medium

EPSS probability0.62%

Next 30 days · Sep 16, 2026

Known exploitationUnconfirmed

Based on sourced intelligence

Hinoki checkNot available

Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

The record

CVE: CVE-2024-23814
Published: Feb 11, 2025
Updated: Jul 10, 2025

Vendor: Siemens
Product: SIMATIC TDC CPU555
Classifications: CWE-400, T1499.004

Attack vector: network
Privileges: unauthenticated

Timeline

How it unfolded

Feb 11, 2025CVE publishedPublication date reported by the CVE source.
Jul 10, 2025Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

Affected versionversion=0 <*

What conditions does exploitation require?

Attack vectornetwork

Required privilegesunauthenticated

What is affected?

Siemens · SIMATIC TDC CPU555version=0 <*

Siemens · SIPLUS ET 200MP IM 155-5 PN STversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1215FC DC/DC/Rlyversion=0 <V4.4

Siemens · SIMATIC S7-300 CPU 317T-3 PN/DPversion=0 <*

Siemens · SIPLUS HCS4200 CIM4210Cversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1215 AC/DC/RLYversion=0 <V4.4

Siemens · SIDOOR ATE530G COATEDversion=0 <*

Siemens · SIPLUS ET 200S IM151-3 PN STversion=0 <*

Siemens · SIPLUS ET 200S IM151-3 PN HFversion=0 <*

Siemens · SIPLUS ET 200MP IM 155-5 PN HFversion=0 <*

Siemens · SIMATIC S7-400 H V6 CPU familyversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1212C AC/DC/Rlyversion=0 <V4.4

Siemens · SIPLUS HCS4200 CIM4210version=0 <*

Siemens · SIPLUS S7-1200 CPU 1215C DC/DC/DCversion=0 <V4.4

Siemens · SIPLUS S7-300 CPU 314C-2 PN/DPversion=0 <*

Siemens · SIMATIC ET 200MP IM 155-5 PN HFversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1215FC DC/DC/DCversion=0 <V4.4

Siemens · SIDOOR ATD430Wversion=0 <*

Siemens · SIPLUS NET PN/PN Couplerversion=0 <V6.0.0

Siemens · SIMATIC S7-1200 CPU 1217C DC/DC/DCversion=0 <V4.4

Siemens · SIMATIC S7-300 CPU 319-3 PN/DPversion=0 <*

Siemens · SIDOOR ATE530S COATEDversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1212C DC/DC/DCversion=0 <V4.4

Siemens · SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)version=0 <V8.3

Siemens · SIMATIC S7-1500 CPU 1516-3 PN/DPversion=0 <*

Siemens · SIMATIC S7-300 CPU 314C-2 PN/DPversion=0 <*

Siemens · SIMATIC ET 200MP IM 155-5 PN STversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1212 AC/DC/RLYversion=0 <V4.4

Siemens · SIMATIC ET 200SP IM 155-6 PN HFversion=0 <*

Siemens · SIMATIC ET 200MP IM 155-5 PN BAversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1211C DC/DC/DCversion=0 <V4.4

Siemens · SIMATIC S7-1200 CPU 1212FC DC/DC/Rlyversion=0 <V4.4

Siemens · SIMATIC ET 200S IM 151-8F PN/DP CPUversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 PN ST BAversion=0 <*

Siemens · SIMATIC ET 200M IM 153-4 PN IO HFversion=0 <*

Siemens · SIMATIC S7-1500 CPU 1511F-1 PNversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 PN HAversion=0 <V1.3

Siemens · SIMATIC CFU PAversion=0 <V2.0; version=0 <V2.0.0

Siemens · SIMATIC ET 200S IM 151-3 PN STversion=0 <*

Siemens · SIPLUS ET 200SP IM 155-6 PN STversion=0 <*

Siemens · SIPLUS S7-300 CPU 315F-2 PN/DPversion=0 <*

Siemens · SIMATIC S7-1500 CPU 1513-1 PNversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 PN HSversion=0 <*

Siemens · SIMATIC S7-300 CPU 319F-3 PN/DPversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 PN/2 HFversion=0 <*

Siemens · SIMATIC S7-1500 CPU 1516F-3 PN/DPversion=0 <*

Siemens · SIPLUS S7-300 CPU 317F-2 PN/DPversion=0 <*

Siemens · SIPLUS ET 200MP IM 155-5 PN ST TX RAILversion=0 <*

Siemens · SIPLUS ET 200S IM 151-8F PN/DP CPUversion=0 <*

Siemens · SIMATIC ET 200M IM 153-4 PN IO STversion=0 <*

Siemens · SIMATIC S7-300 CPU 315F-2 PN/DPversion=0 <*

Siemens · SIMATIC ET 200S IM 151-3 PN FOversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1214 DC/DC/RLYversion=0 <V4.4

Siemens · SIMATIC ET 200S IM 151-3 PN HFversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1215 DC/DC/DCversion=0 <V4.4

Siemens · SIPLUS ET 200MP IM 155-5 PN HF T1 RAILversion=0 <*

Siemens · SIPLUS ET 200SP IM 155-6 PN HFversion=0 <*

Siemens · SIPLUS ET 200SP IM 155-6 PN ST BAversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1211C AC/DC/Rlyversion=0 <V4.4

Siemens · SIPLUS HCS4300 CIM4310version=0 <*

Siemens · SIMATIC S7-1200 CPU 1214C AC/DC/Rlyversion=0 <V4.4

Siemens · SIMATIC S7-1500 CPU 1511-1 PNversion=0 <*

Siemens · SIPLUS S7-1500 CPU 1511F-1 PNversion=0 <*

Siemens · SIMATIC S7-400 PN/DP V7 CPU familyversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 PN/3 HFversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1214C DC/DC/DC RAILversion=0 <V4.4

Siemens · SIMATIC ET 200SP CPU 1510SP F-1 PNversion=0 <*

Siemens · SIMATIC S7-1500 CPU 1513F-1 PNversion=0 <*

Siemens · SIMATIC Power Line Booster PLB, Base Moduleversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1214FC DC/DC/RLYversion=0 <V4.4

Siemens · SIWAREX WP522 STversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1212FC DC/DC/DCversion=0 <V4.4

Siemens · SIPLUS ET 200M IM 153-4 PN IO HFversion=0 <*

Siemens · SIMATIC ET 200pro IM 154-3 PN HFversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 MF HFversion=0 <*

Siemens · SIPLUS S7-1500 CPU 1513-1 PNversion=0 <*

Siemens · SIPLUS S7-1500 CPU 1516F-3 PN/DPversion=0 <*

Siemens · SIPLUS S7-1500 CPU 1513F-1 PNversion=0 <*

Siemens · SIMATIC S7-300 CPU 315T-3 PN/DPversion=0 <*

Siemens · SIMATIC ET 200SP CPU 1512SP F-1 PNversion=0 <*

Siemens · SIMATIC ET 200AL IM 157-1 PNversion=0 <*

Siemens · SIPLUS S7-1500 CPU 1516-3 PN/DPversion=0 <*

Siemens · SIMATIC ET 200pro IM 154-8FX PN/DP CPUversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1212C DC/DC/DCversion=0 <V4.4

Siemens · SIPLUS ET 200SP IM 155-6 PN ST TX RAILversion=0 <*

Siemens · SIMATIC Power Line Booster PLB, Modem Module STversion=0 <*

Siemens · SIMATIC ET 200SP IM 155-6 PN STversion=0 <*

Siemens · SIMATIC S7-410 V10 CPU familyversion=0 <V10.2

Siemens · SIPLUS S7-1200 CPU 1214 AC/DC/RLYversion=0 <V4.4

Siemens · SIPLUS S7-1200 CPU 1215 DC/DC/RLYversion=0 <V4.4

Siemens · SIMATIC ET 200SP IM 155-6 PN BAversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1212 DC/DC/RLYversion=0 <V4.4

Siemens · SIMATIC S7-1200 CPU 1211C DC/DC/Rlyversion=0 <V4.4

Siemens · SIPLUS S7-1500 CPU 1511-1 PNversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1215C AC/DC/Rlyversion=0 <V4.4

Siemens · SIMOCODE pro V EtherNet/IPversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1214FC DC/DC/DCversion=0 <V4.4

Siemens · SIMATIC S7-300 CPU 315-2 PN/DPversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1215FC DC/DC/DCversion=0 <V4.4

Siemens · SIMATIC S7-1500 CPU 1515F-2 PNversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1215C DC/DC/DCversion=0 <V4.4

Siemens · SIPLUS ET 200S IM 151-8 PN/DP CPUversion=0 <*

Siemens · SIPLUS S7-300 CPU 315-2 PN/DPversion=0 <*

Siemens · SIPLUS ET 200SP IM 155-6 PN ST BA TX RAILversion=0 <*

Siemens · SIMATIC ET 200SP CPU 1512SP-1 PNversion=0 <*

Siemens · SINUMERIK 840D slversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1212C DC/DC/RLYversion=0 <V4.4

Siemens · SIMATIC S7-300 CPU 317F-2 PN/DPversion=0 <*

Siemens · SIPLUS ET 200SP IM 155-6 PN HF T1 RAILversion=0 <*

Siemens · SIMATIC S7-300 CPU 317TF-3 PN/DPversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1215C DC/DC/Rlyversion=0 <V4.4

Siemens · SIMATIC TDC CP51M1version=0 <*

Siemens · SIPLUS S7-300 CPU 317-2 PN/DPversion=0 <*

Siemens · SIMATIC PN/PN Couplerversion=0 <V6.0.0

Siemens · SIMATIC S7-300 CPU 317-2 PN/DPversion=0 <*

Siemens · SIWAREX WP241version=0 <*

Siemens · SIMATIC S7-1500 CPU 1515-2 PNversion=0 <*

Siemens · SIPLUS S7-1200 CPU 1212C DC/DC/DC RAILversion=0 <V4.4

Siemens · SIPLUS ET 200SP IM 155-6 PN HF TX RAILversion=0 <*

Siemens · SIWAREX WP251version=0 <*

Siemens · SIMATIC ET 200S IM 151-3 PN HSversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1214C DC/DC/DCversion=0 <V4.4

Siemens · SIWAREX WP521 STversion=0 <*

Siemens · SIMATIC S7-1200 CPU 1214C DC/DC/Rlyversion=0 <V4.4

Siemens · SIMATIC S7-1200 CPU 1214FC DC/DC/DCversion=0 <V4.4

Siemens · SIPLUS S7-1200 CPU 1214 DC/DC/DCversion=0 <V4.4

Siemens · SIMATIC CFU DIQversion=0 <V2.0.0

Siemens · SIMATIC S7-1200 CPU 1214FC DC/DC/Rlyversion=0 <V4.4

Siemens · SIMATIC ET 200pro IM 154-8 PN/DP CPUversion=0 <*

Siemens · SIMOCODE pro V PROFINETversion=0 <*

Siemens · SIMATIC ET 200S IM 151-8 PN/DP CPUversion=0 <*

Siemens · SIMATIC ET 200pro IM 154-4 PN HFversion=0 <*

Siemens · SIWAREX WP231version=0 <*

Siemens · SIMATIC ET 200SP CPU 1510SP-1 PNversion=0 <*

Siemens · SIPLUS ET 200SP CPU 1512SP F-1 PNversion=0 <*

Siemens · SIMATIC ET 200pro IM 154-8F PN/DP CPUversion=0 <*

Siemens · SIPLUS ET 200M IM 153-4 PN IO STversion=0 <*

Published CVSS scores

6.9Siemens ProductCERTCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

5.3CISACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026

Latest reporting daySep 16, 2026

Latest daily unique IPsUnavailable

Prior 30-day averageUnavailable

SourceShadowserver honeypots (KEV)

Vectornetwork

Privilegesunauthenticated

Known exploitationUnconfirmed

Public exploitUnconfirmed

Weakness, pattern, technique

CWE-400Uncontrolled Resource Consumption

T1499.004Application or System Exploitation

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo