CVE-2026-22925

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources.

Score

CVSS 4.0 8.7 High

Status

Analyzed - productcert@siemens.com

Published

2026-05-12

Last modified

2026-10-24

Weaknesses

CWE-770

Affected products

• Simatic Cn 4100 (Siemens)
• Simatic Cn 4100 Firmware (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-032379.html