Siemens Simocode Pro V Profinet vulnerabilities
5 vulnerabilities
Known vulnerabilities in Siemens Simocode Pro V Profinet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-40820siemenssidoor_atd430w_firmware+144
EPSS score0.49%
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.CVE-2017-2681siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+174EPSS score0.91%
Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected.CVE-2017-2680siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+200EPSS score1.15%
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.CVE-2017-12741siemensdevelopment/evaluation kits for profinet io: dk standard ethernet controller+118EPSS score3.31%
Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.CVE-2024-23814siemenssidoor_atd430w_firmware+136EPSS score0.62%
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.