Product by Siemens
Siemens SIMATIC CN 4100 Firmware
20 known vulnerabilities in Siemens SIMATIC CN 4100 Firmware (Siemens), 2 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability In CISA KEValso in 37 other products | 7.8 | |
| Critical | CVE-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability In CISA KEValso in 6 other products | 9.8 | |
| Critical | CVE-2024-32740 | Siemens SIMATIC CN 4100: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2024-32741 | Siemens SIMATIC CN 4100: Use of Hard-coded Password | 10.0 | |
| High | CVE-2025-40937 | Siemens SIMATIC CN 4100: Command Injection | 8.8 | |
| Medium | CVE-2026-2673 | OpenSSL TLS 1.3 server may choose unexpected key agreement group | 6.5 | |
| Critical | CVE-2023-49621 | Siemens SIMATIC CN 4100: Use of Default Credentials | 9.8 | |
| Critical | CVE-2023-29130 | Siemens SIMATIC CN 4100: Improper Access Control | 9.9 | |
| Critical | CVE-2025-40938 | Siemens SIMATIC CN 4100: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2026-22924 | Siemens SIMATIC CN 4100: Missing Authentication for Critical Function | 9.1 | |
| High | CVE-2026-22925 | Siemens SIMATIC CN 4100: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2023-49251 | Siemens SIMATIC CN 4100: Authorization Bypass Through User-Controlled Key | 8.8 | |
| Critical | CVE-2023-29131 | Siemens SIMATIC CN 4100: Incorrect Default Permissions | 10.0 | |
| High | CVE-2023-49252 | Siemens SIMATIC CN 4100: Improper Input Validation | 7.5 | |
| Medium | CVE-2025-40940 | Siemens SIMATIC CN 4100: Exposure of Sensitive Information to an Unauthorized Actor | 4.9 | |
| High | CVE-2025-40593 | Siemens SIMATIC CN 4100: Improper Input Validation | 6.5 | |
| High | CVE-2024-32742 | Siemens SIMATIC CN 4100: Missing Immutable Root of Trust in Hardware | 7.6 | |
| High | CVE-2025-38502 | Linux Kernel: Out-of-Bounds Access | 7.8 | |
| Medium | CVE-2025-40941 | Siemens SIMATIC CN 4100: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2025-40939 | Siemens SIMATIC CN 4100: Improper Access Control | 4.6 |
News
- CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wildthehackernews,
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,