Siemens SIMATIC Cn 4100 Firmware vulnerabilities

20 CVEs affecting Siemens SIMATIC Cn 4100 Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22925, published 2026-05-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, published 2026-04-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-05-01. EPSS: 3.4% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the…
CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability, published 2025-09-05. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-09-18. EPSS: 2.9% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records…
CVE-2024-32740, published 2024-05-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise…
CVE-2024-32741, published 2024-05-14. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains hard coded password which is used for the privileged system user `root` and for the boot…
CVE-2023-49621, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges.…
CVE-2025-40937, published 2025-12-09. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of…
CVE-2023-49252, published 2024-01-09. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected application allows IP configuration change without authentication to the device. This could allow an…
CVE-2023-29130, published 2023-07-11. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An…
CVE-2023-49251, published 2024-01-09. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application allows an attacker to add their own login…
CVE-2026-2673, published 2026-03-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT'…

Latest

CVE-2026-22925, published 2026-05-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This…
CVE-2026-22924, published 2026-05-12. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion…
CVE-2025-40941, published 2025-12-09. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could allow an attacker with network access to…
CVE-2025-40940, published 2025-12-09. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable…
CVE-2025-40939, published 2025-12-09. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow an attacker with…
CVE-2025-40938, published 2025-12-09. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse…