Siemens Sinamics G120 (Incl. Siplus Variants) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Siemens Sinamics G120 (Incl. Siplus Variants), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2025-40833siemensie/pb link ha+242
EPSS score
0.32%
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.7.5CVE-2022-25622siemenssimatic_cfu_diq_firmware+76
EPSS score
0.90%
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.