Siemens Siplus s7-1200 CPU 1215c Ac/dc/rly vulnerabilities

2 CVEs affecting Siemens Siplus s7-1200 CPU 1215c Ac/dc/rly, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40820, published 2025-12-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-40820, published 2025-12-09. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to…
CVE-2024-46886, published 2024-10-08. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an…