PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-53183 Siemens CVE debrief

A vulnerability in the Linux kernel's User-Mode Linux (UML) network driver could allow a local attacker to cause a denial of service condition. The issue stems from improper handling of driver data during release operations in the UML network subsystem.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations running Siemens industrial network infrastructure, particularly RUGGEDCOM and SCALANCE devices based on SINEC OS. System administrators managing Linux-based industrial control systems and security teams responsible for OT/ICS environments should prioritize patching based on network exposure and criticality of affected devices.

Technical summary

CVE-2024-53183 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's User-Mode Linux (UML) network driver. The vulnerability occurs because driver data (drvdata) is not available during release operations, potentially causing a denial of service condition. The attack requires local access with low privileges and no user interaction. Siemens has identified affected products in their industrial networking portfolio including RUGGEDCOM RST2428P and SCALANCE switch families running SINEC OS.

Defensive priority

medium

Recommended defensive actions

  • Apply vendor-provided updates to affected Siemens industrial network devices. For RUGGEDCOM RST2428P and SCALANCE XCM-/XRM-/XCH-/XRH-300 family, update to V3.2 or later. For SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500,
  • follow vendor guidance in the Siemens ProductCERT advisory.
  • Implement network segmentation for industrial control systems to limit local access.
  • Apply principle of least privilege for user accounts on affected systems.
  • Monitor for anomalous system behavior or unexpected driver failures.

Evidence notes

The vulnerability description indicates that drvdata is not available during release operations in the UML network driver. This is a local attack vector requiring low privileges with no user interaction. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms availability impact is high, with no confidentiality or integrity impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-53183 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-53183

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-53183 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-53183

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-07.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-355557.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-355557.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.