Siemens Siplus Hcs4300 Cim4310 vulnerabilities
3 vulnerabilities
Known vulnerabilities in Siemens Siplus Hcs4300 Cim4310, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-40820siemenssidoor_atd430w_firmware+144
EPSS score0.49%
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.CVE-2022-25622siemenssimatic_cfu_diq_firmware+76EPSS score0.90%
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.CVE-2024-23814siemenssidoor_atd430w_firmware+136EPSS score0.62%
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.