PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-26997 Siemens CVE debrief

A variable dereference issue in the DesignWare USB 2.0 (DWC2) host controller driver's Descriptor DMA (DDMA) completion flow was resolved in the Linux kernel. The vulnerability affected Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE X-family switches. Siemens has addressed this through updates to SINEC OS V3.1 or later. The CVSS vector indicates network attack vector with high attack complexity, requiring no privileges but user interaction, with no impact to confidentiality, integrity, or availability—suggesting limited practical exploitability.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
NONE
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations operating Siemens RUGGEDCOM and SCALANCE industrial Ethernet switches, particularly those with USB host functionality exposed or in use. ICS/OT security teams maintaining SINEC OS-based infrastructure should verify patch status. Given the CVSS scoring indicating no security impact, prioritization should be lower than vulnerabilities with demonstrated exploitability or impact.

Technical summary

The vulnerability exists in the DesignWare USB 2.0 (DWC2) host controller driver within the Linux kernel, specifically in the Descriptor DMA (DDMA) completion handling code. A variable dereference issue in this flow could lead to undefined behavior. The fix corrects the dereference logic in the DDMA completion path. This driver is used in embedded Linux systems including Siemens industrial networking equipment running SINEC OS. The affected products include RUGGEDCOM RST2428P (6GK6242-6PA00) and SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family switches. The CVSS 3.1 vector indicates network accessibility with high attack complexity, requiring user interaction but no privileges, with no rated impact to confidentiality, integrity, or availability.

Defensive priority

low

Recommended defensive actions

  • Update affected Siemens SINEC OS devices to version 3.1 or later per vendor guidance
  • Review network segmentation for industrial control systems to limit exposure of USB host interfaces
  • Apply defense-in-depth practices for ICS environments per CISA guidance
  • Monitor for subsequent vendor advisories regarding additional affected products or patches

Evidence notes

The vulnerability description indicates a fix for a variable dereference issue in the DWC2 host controller's DDMA completion flow. Siemens ProductCERT advisory SSA-613116 (republished by CISA as ICSA-25-226-15) identifies affected products and remediation. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N) yields a base score of 0.0, indicating no security impact under standard scoring. The advisory was initially published 2025-08-12 and most recently updated 2026-02-25 to reflect CISA republication based on Siemens advisory updates.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-26997 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-26997

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-26997 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-26997

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-15.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-613116.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-613116.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.