BaseFortify

Publication date: 2026-05-12

Last updated on: 2026-06-29

Assigner: Siemens AG

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-12

Last Modified

2026-06-29

Generated

2026-07-11

EPSS Evaluated

2026-07-10

NVD

CVE-2026-22925

EUVD

EUVD-2026-29424

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	simatic_cn_4100_firmware	to 5.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-22925. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70