Siemens SIMATIC CN 4100 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Siemens SIMATIC CN 4100: 7 record(s), with affected versions and fixes.
CVE-2026-22925
High · 7.5
CWE-770 May 12, 2026
Allocation of Resources Without Limits or Throttling in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets
This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources.
CVE-2026-22924
Critical · 9.1
CWE-306 May 12, 2026
Missing Authentication for Critical Function in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions.
This could allow an attacker to disrupt normal operations or perform unauthorized actions, potentially impacting system availability and integrity.
CVE-2025-40941
Medium · 4.3
CWE-200 Dec 9, 2025
Exposure of Sensitive Information in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses.
This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.
CVE-2025-40940
Medium · 4.9
CWE-200 Dec 9, 2025
Exposure of Sensitive Information in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.
CVE-2025-40939
Medium · 4.6
CWE-284 Dec 9, 2025
Improper Access Control in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow an attacker with physical access to the device to trigger reboot that could cause denial of service condition.
CVE-2025-40938
Critical · 9.8
CWE-798 Dec 9, 2025
Use of Hard-coded Credentials in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability.
CVE-2025-40937
High · 8.8
CWE-77 Dec 9, 2025
Command Injection in Siemens Simatic Cn 4100 Firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments.
This could allow an authenticated attacker to execute arbitrary code with limited privileges.