CVE-2025-40771

A vulnerability has been identified in SIMATIC CP 1542SP-1 6GK7542-6UX00-0XE0 All versions V2.4.24, SIMATIC CP 1542SP-1 IRC 6GK7542-6VX00-0XE0 All versions V2.4.24, SIMATIC CP 1543SP-1 6GK7543-6WX00-0XE0 All versions V2.4.24, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 6AG2542-6VX00-4XE0 All versions...

The vulnerability of microprogrammed software in Siemens SIMATIC S7 programmable logic controllers is related to insufficient verification of the communication channel source. This allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7 programmable logic controllers is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the insufficient protection of registration data, allowing intruders to increase their privileges.

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to information disclosure, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway relates to the exposure of information. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to protected information...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to information disclosure, allows a intruder to gain access to confidential information.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway relates to the exposure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential information...

The vulnerability of the software development environment for systems that automate technological processes, the Totally Integrated Automation Portal (Portal TIA), and the software used for modeling and simulating the operation of Siemens S7 controllers, arises due to deficiencies in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerability of the software development environment of Totally Integrated Automation Portal Portal TIA and the software for simulating and testing the operation of Siemens S7 controllers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an...

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the insufficient verification of input data. This allows a intruder to perform maintenance work without being detected.

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to insufficient verification of input data. Exploiting this vulnerability could allow an intruder to cause a service failure...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to access control errors, allows a intruder to trigger a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, which is related to the use of rigidly encrypted account data, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway lies in the use of strictly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of SIMATIC IPC device’s microprogramming software lies in the improper assignment of permissions to critical resources. This allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of SIMATIC IPC microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200, related to improper release of resources, allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 is related to the improper release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...

The vulnerability of the MICROprogramming software of the SIMATIC CN 4100 communication gateway, related to the lack of measures taken for data cleaning at the management level, allows a intruder to execute arbitrary codes.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

CVE-2022-27194

A vulnerability has been identified in SIMATIC PCS neo Administration Console All versions V3.1 SP1, SINETPLAN All versions, TIA Portal V15, V15.1, V16 and V17. The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this...

CVE-2022-27640

A vulnerability has been identified in SIMATIC CP 442-1 RNA All versions V1.5.18, SIMATIC CP 443-1 RNA All versions V1.5.18. The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming...

The vulnerability of the User Management Component (UMC) in the web-based industrial process management system SIMATIC PCS neo allows a attacker to trigger a service failure.

The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of the buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...

Siemens SIMATIC CN 4100 Command Injection Vulnerability

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. The Siemens SIMATIC CN 4100 suffers from a command injection vulnerability that stems from insufficient validation of REST API input parameters, which can be exploited by an attacker to cause execution of arbitrary code...

CVE-2025-40941

A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected devices exposes server information in its responses. This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks...

CVE-2025-40937

A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited...

EUVD-2025-201916

A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0.1. The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data,...