SSA-593272 V2.5 (Last Update: 2025-07-08): SegmentSmack in Interniche IP-Stack based Industrial Devices

Risk Summary

<p>A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions.</p> <p>The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service.</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)