Resource Exhaustion Vulnerability in SIMATIC CN 4100 by Siemens
CVE-2026-22924

8.8HIGH

Key Information:

Vendor

Siemens
Status
Simatic Cn 4100
Vendor
CVE Published:
12 May 2026

What is CVE-2026-22924?

A vulnerability exists in the SIMATIC CN 4100, where the application fails to adequately restrict unauthenticated connections. This flaw may allow attackers to exploit the system, potentially leading to resource exhaustion and the disruption of normal operations. The impacts can include unauthorized actions that threaten both system availability and data integrity, making it essential for organizations to assess their exposure and implement appropriate safeguards.

Affected Version(s)

SIMATIC CN 4100 0

References

https://cert-portal.siemens.com/productcert/html/ssa-0323...

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.