PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-53156 Siemens CVE debrief

CVE-2024-53156 is a vulnerability in the Linux kernel's ath9k wireless driver, specifically in the htc_connect_service() function. The issue involves a missing range check for the conn_rsp_epid parameter, which could lead to improper validation of endpoint IDs during HTC (Host/Target Communication) service connection. This vulnerability was published on August 12, 2025, and last modified on February 25, 2026. Siemens has identified this CVE as affecting certain industrial networking products, including the RUGGEDCOM RST2428P and SCALANCE families, though the CISA advisory marks the impact assessment as 'Misinformed' for the tracked product IDs. The vulnerability originates from the Linux kernel's WiFi subsystem and was addressed by adding proper range validation for the connection response endpoint ID. Organizations using affected Siemens industrial networking equipment should consult the vendor's security advisory for specific patch availability and applicability to their deployed configurations.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations operating Siemens industrial networking infrastructure with wireless capabilities, particularly RUGGEDCOM RST2428P and SCALANCE XC/XR/XCM/XRM/XCH/XRH series devices. Security teams managing OT/ICS environments with Linux-based wireless access points or client devices using ath9k chipsets. Network administrators responsible for patch management of industrial wireless infrastructure.

Technical summary

CVE-2024-53156 addresses a missing range validation in the Linux kernel's ath9k wireless driver, specifically within the htc_connect_service() function that handles Host/Target Communication protocol connections. The conn_rsp_epid (connection response endpoint ID) parameter lacked proper bounds checking, potentially allowing invalid endpoint identifiers to propagate through the HTC service connection flow. The fix adds explicit range validation for this parameter. This vulnerability affects the ath9k HTC layer used in Atheros 802.11n wireless chipsets. Siemens has incorporated this third-party Linux kernel fix into their SINEC OS-based industrial networking products, with specific applicability to RUGGEDCOM RST2428P and select SCALANCE product families depending on wireless configuration.

Defensive priority

medium

Recommended defensive actions

  • Review Siemens ProductCERT advisory SSA-355557 for definitive affected product and patch information
  • Verify if deployed Siemens RUGGEDCOM RST2428P or SCALANCE XC/XR/XCM/XRM/XCH/XRH family devices are configured with ath9k-dependent wireless functionality
  • Apply vendor-provided firmware updates when available per Siemens security advisory guidance
  • Monitor CISA ICS advisory ICSA-25-226-07 for updates to impact assessment
  • Implement network segmentation for industrial wireless infrastructure per CISA ICS recommended practices

Evidence notes

The vulnerability description indicates a missing range check in the ath9k HTC (Host/Target Communication) layer. The CISA CSAF advisory ICSA-25-226-07 tracks this CVE with 'Misinformed' impact classification for product IDs CSAFPID-0006, CSAFPID-0002, and CSAFPID-0003. Siemens ProductCERT advisory SSA-355557 provides the authoritative vendor assessment. The advisory revision history shows multiple updates through February 2026, including removal of rejected CVEs and clarification of affected product configurations.

Official resources

2025-08-12