Denial of Service Vulnerability in PROFINET Stack from Siemens

CVE-2022-25622

Summary

The PROFINET (PNIO) stack integrated with the Interniche IP stack is susceptible to vulnerabilities that arise from improper management of internal resources concerning TCP segments. Specifically, when the minimum TCP header length is defined incorrectly, this flaw can be exploited by attackers who send specially crafted TCP segments. Such manipulation can lead to an interruption of TCP services on the affected devices, resulting in a denial of service condition that can significantly impact operational availability.

References