Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

SIMATIC CN 4100: Unrestricted Access to Unsecured Connections

CVE-2026-22924 · published 5 months ago
Summary

If left unpatched, older versions of SIMATIC CN 4100 may allow unauthorized access to the system. This could disrupt normal operations and impact system availability. Siemens recommends updating to version V5.0 or later to fix this issue.

Original advisory text
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhausti...
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions.
This could allow an attacker to disrupt normal operations or perform unauthorized actions, potentially impacting system availability and integrity.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published12 May 2026
Updated4 Nov 2026
First seen12 May 2026
Sources
CVE-2026-22924 · NVD
Track software like this
Free during beta