PT-2026-7972 · Siemens · Simatic Cn 4100+1

CVE-2026-22924 · Published 2026-02-12 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V5.0

Description The application does not properly restrict unauthenticated connections, making it susceptible to resource exhaustion. This condition allows an attacker to disrupt normal operations or perform unauthorized actions, which may impact system availability and integrity.

Recommendations Update to version V5.0 or later.

Fix

DoS

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-22924

Affected Products

Simatic Cn 4100

Simatic Cn 4100 Firmware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-22924 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html · Vendor Advisory
• https://t.me/CVEtracker/53474 · Telegram Post
• https://twitter.com/0x2ed3bb60/status/2054155158112936207 · Twitter Post
• https://t.me/cveNotify/178450 · Telegram Post
• https://twitter.com/ThreatSynop/status/2022009650703384929 · Twitter Post