CVE-2026-22925: simatic cn 4100 firmware before 5.0 (exclusive); +1 more affected products

Affected technology

simatic cn 4100 firmware · before 5.0 (exclusive)
siemens

SIMATIC CN 4100 · 0 to before V5.0
Siemens

Description’s affected range: versions < V5.0)

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source says the affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.