Siemens Simatic Cfu Pa vulnerabilities
6 vulnerabilities
Known vulnerabilities in Siemens Simatic Cfu Pa, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-40820siemenssidoor_atd430w_firmware+144
EPSS score0.49%
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.CVE-2025-40833siemensie/pb link ha+242EPSS score0.32%
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.CVE-2020-28400siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+309EPSS score1.86%
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service condition. The vulnerability can be triggered if a large amount of DCP reset packets are sent to the device.CVE-2022-25622siemenssimatic_cfu_diq_firmware+76EPSS score0.90%
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.CVE-2024-23814siemenssidoor_atd430w_firmware+136EPSS score0.62%
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.CVE-2019-10936siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+139EPSS score2.07%
Affected devices improperly handle large amounts of specially crafted UDP packets.
This could allow an unauthenticated remote attacker to trigger a denial of service condition.