HIGH🇵🇱 Wersja polska

CVE-2026-22924

CVSS 8.8v4.0pub. 2026-05-12upd. 2026-06-29

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions. This could allow an attacker to disrupt normal operations or perform unauthorized actions, potentially impacting system availability and integrity.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Siemens Simatic Cn 4100

    HW
    Siemens
    all versions

  • Siemens Simatic Cn 4100 Firmware

    OS
    Siemens
    < 5.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-40938CRITICAL9.2PL ✓same product

Siemens SIMATIC CN 4100 — zakodowane dane uwierzytelniające w firmware

CVE-2024-32741CRITICAL10.0PL ✓same product

Zakodowane na stałe hasło root w Siemens SIMATIC CN 4100

CVE-2024-32740CRITICAL9.8PL ✓same product

Ukryte dane uwierzytelniające w Siemens SIMATIC CN 4100 (hardcoded credentials)

CVE-2023-49621CRITICAL9.8PL ✓same product

Siemens SIMATIC CN 4100 – domyślne dane uwierzytelniające z uprawnieniami administratora

CVE-2023-29130CRITICAL9.9PL ✓same product

Privilege escalation w Siemens SIMATIC CN 4100 — błędna kontrola dostępu