CVE-2026-22925

HighCVSS 7.5

Published: 12/05/2026(UTC)Updated: 29/06/2026(UTC)Translated: 30/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

A vulnerability in SIMATIC CN 4100 (versions prior to V5.0) allows resource exhaustion via a high volume of TCP SYN packets. An attacker can cause service unavailability and denial-of-service conditions.

Risk Assessment

The risk involves potential disruption of critical industrial processes, leading to production downtime and financial losses.

Recommendation

Immediately update to version V5.0 or later. Meanwhile, restrict access to the device and implement SYN flood protection mechanisms.

Other vulnerabilities in SIMATIC CN 4100

CVE-2026-22924Critical
A vulnerability in SIMATIC CN 4100 (versions prior to V5.0) allows unauthenticated attackers to exhaust resources via unrestricted connections. This can disrupt normal device operations.

Original NVD description (English source)

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources.