PatchTheCVECVE-2026-22925: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)
CVE-2026-22925 is a high-severity flaw (CVSS 7.5) affecting simatic cn 4100 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 76%) |
| CISA exploited list | No |
| Weakness | CWE-770 |
| Published | 2026-05-12 |
| Last modified | 2026-10-24 |
Last updated 2026-10-24 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-22925?
simatic cn 4100 firmware: upgrade to 5.0. Exact commands for each OS are on this page.
Is CVE-2026-22925 being exploited?
CVE-2026-22925 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-22925 affect?
CVE-2026-22925 affects simatic cn 4100 firmware. Severity is high (CVSS 7.5). A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the servic
How urgent is CVE-2026-22925?
Priority 37/100. High severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2023-29131 HIGH 7.4 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5)
- CVE-2025-40937 HIGH 8.3 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
- CVE-2025-40938 HIGH 8.1 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
- CVE-2025-40940 MEDIUM 4.9 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
- CVE-2025-40941 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)