PT-2026-7972 · Siemens · Simatic Cn 4100

Published 2026-02-12 · Updated 2026-05-12 · CVE-2026-22924

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V5.0

Description The application does not properly restrict unauthenticated connections, making it susceptible to resource exhaustion. This condition allows an attacker to disrupt normal operations or perform unauthorized actions, which may impact system availability and integrity.

Recommendations Update to version V5.0 or later.

Fix

DoS

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-22924

Affected Products

Simatic Cn 4100

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-22924 · Security Note
• https://twitter.com/0x2ed3bb60/status/2054155158112936207 · Twitter Post
• https://t.me/CVEtracker/53474 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html · Note
• https://twitter.com/ThreatSynop/status/2022009650703384929 · Twitter Post