Simatic Cn 4100 (Siemens) - vulnerabilities (CVEs)

187 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-05-12. Vendor: Siemens.

CVEs of Simatic Cn 4100

CVE-2026-22925 - CVSS 8.7 (high), 2026-05-12: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to…
CVE-2026-22924 - CVSS 9.1 (critical), 2026-05-12: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections…
CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2026-28390 - CVSS 7.5 (high), 2026-04-07: Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary:…
CVE-2026-28389 - CVSS 7.5 (high), 2026-04-07: Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary:…
CVE-2026-31790 - CVSS 7.5 (high), 2026-04-07: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a…
CVE-2026-31789 - CVSS 9.8 (critical), 2026-04-07: Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary:…
CVE-2026-28387 - CVSS 8.1 (high), 2026-04-07: Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may…
CVE-2026-28388 - CVSS 7.5 (high), 2026-04-07: Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number…
CVE-2026-2673 - CVSS 6.5 (medium), 2026-03-13: Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes…
CVE-2025-14831 - CVSS 5.3 (medium), 2026-02-09: A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via…
CVE-2025-9820 - CVSS 4 (medium), 2026-01-26: A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label…
CVE-2026-21947 - CVSS 3.1 (low), 2026-01-20: Vulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability…
CVE-2026-21945 - CVSS 7.5 (high), 2026-01-20: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…
CVE-2026-21932 - CVSS 7.4 (high), 2026-01-20: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported…
CVE-2026-21933 - CVSS 6.1 (medium), 2026-01-20: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported…
CVE-2026-21925 - CVSS 4.8 (medium), 2026-01-20: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions…
CVE-2025-40937 - CVSS 8.8 (high), 2025-12-09: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST…
CVE-2025-40940 - CVSS 6.9 (medium), 2025-12-09: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as…
CVE-2025-40939 - CVSS 5.1 (medium), 2025-12-09: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated…
CVE-2025-40938 - CVSS 9.8 (critical), 2025-12-09: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could…
CVE-2025-40941 - CVSS 5.3 (medium), 2025-12-09: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could…
CVE-2025-61795 - CVSS 5.3 (medium), 2025-10-27: Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart…
CVE-2025-55752 - CVSS 7.5 (high), 2025-10-27: Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was…
CVE-2025-55754 - CVSS 9.6 (critical), 2025-10-27: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If…
CVE-2025-61748 - CVSS 3.7 (low), 2025-10-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported…
CVE-2025-53066 - CVSS 7.5 (high), 2025-10-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions…
CVE-2025-53057 - CVSS 5.9 (medium), 2025-10-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported…
CVE-2025-9232 - CVSS 5.9 (medium), 2025-09-30: Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and…
CVE-2025-9231 - CVSS 6.5 (medium), 2025-09-30: Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM…
CVE-2025-9230 - CVSS 7.5 (high), 2025-09-30: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact…
CVE-2025-39866 - CVSS 7.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred…
CVE-2025-39865 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer…
CVE-2025-39864 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in…
CVE-2025-39860 - CVSS 8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat…
CVE-2025-39857 - CVSS 7.5 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() BUG: kernel NULL…
CVE-2025-39853 - CVSS 7.1 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns…
CVE-2025-39846 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In…
CVE-2025-39849 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen…
CVE-2025-39845 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define…
CVE-2025-39848 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25_kiss_rcv() Bernard Pidoux reported a regression…
CVE-2025-39844 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we…
CVE-2025-39847 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it…
CVE-2025-39843 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock…
CVE-2025-39838 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer…
CVE-2025-39842 - CVSS 5.5 (medium), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling…
CVE-2025-39841 - CVSS 9.8 (critical), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free…
CVE-2025-39839 - CVSS 8.8 (high), 2025-09-19: In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet()…
CVE-2025-39835 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very…
CVE-2025-39828 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat…
CVE-2025-39827 - CVSS 8.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains…
CVE-2025-39826 - CVSS 8.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used…
CVE-2025-39824 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called…
CVE-2025-39825 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename…
CVE-2025-39823 - CVSS 7.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are…
CVE-2025-39819 - CVSS 5.5 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was…
CVE-2025-39817 - CVSS 7.1 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on…
CVE-2025-39813 - CVSS 4.7 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling…
CVE-2025-39812 - CVSS 5.5 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not…
CVE-2025-39808 - CVSS 5.5 (medium), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in…
CVE-2025-39806 - CVSS 8.8 (high), 2025-09-16: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device…
CVE-2025-43368 - CVSS 4.3 (medium), 2025-09-15: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing…
CVE-2025-39800 - CVSS 7.8 (high), 2025-09-15: In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() If we find an…
CVE-2025-39801 - CVSS 5.5 (medium), 2025-09-15: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addresses a…
CVE-2025-39798 - CVSS 7.3 (high), 2025-09-12: In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem Capabilities…
CVE-2025-39794 - CVSS 5.5 (medium), 2025-09-12: In the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan crashes the kernel trying to check…
CVE-2025-39795 - CVSS 5.5 (medium), 2025-09-12: In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In…
CVE-2025-39788 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE On Google gs101, the number of…
CVE-2025-40300 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits…
CVE-2025-39790 - CVSS 8.4 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a…
CVE-2025-39782 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and…
CVE-2025-39787 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is…
CVE-2025-39783 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a list_del() on the epf_group…
CVE-2025-39776 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: clear page table entries at destroy_args() The mm/debug_vm_pagetable…
CVE-2025-39773 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set…
CVE-2025-39770 - CVSS 7.5 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing…
CVE-2025-39772 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver…
CVE-2025-39766 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setup…
CVE-2025-39759 - CVSS 7 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There's a race…
CVE-2025-39757 - CVSS 7.1 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors…
CVE-2025-39756 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is set…
CVE-2025-39760 - CVSS 7.1 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing…
CVE-2025-39752 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary…
CVE-2025-39749 - CVSS 7 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race On kernels built with CONFIG_IRQ_WORK=y,…
CVE-2025-39743 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy…
CVE-2025-39742 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The function divides…
CVE-2025-39738 - CVSS 7.8 (high), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal…
CVE-2025-39737 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was…
CVE-2025-39736 - CVSS 5.5 (medium), 2025-09-11: In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is…
CVE-2025-39724 - CVSS 5.5 (medium), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN parameter is set to 1, the…
CVE-2025-39716 - CVSS 5.5 (medium), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access…
CVE-2025-39719 - CVSS 7.1 (high), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array Fix a potential out-of-bounds array…
CVE-2025-39718 - CVSS 8.4 (high), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock…
CVE-2025-39713 - CVSS 4.7 (medium), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() In the interrupt…
CVE-2025-39710 - CVSS 7.8 (high), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to…
CVE-2025-39715 - CVSS 5.5 (medium), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e…
CVE-2025-39709 - CVSS 5.5 (medium), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt…
CVE-2025-39714 - CVSS 7.8 (high), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and…
CVE-2025-39701 - CVSS 7.8 (high), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The security-version-number check…
CVE-2025-39706 - CVSS 5.5 (medium), 2025-09-05: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to…