Siemens SIMATIC CFU PA
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-40820 | < V2.0.0 | Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This | HIGH 8.7 | 0.5 % | ||
| CVE-2024-23814 | < V2.0.0 | The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving | MEDIUM 6.9 | 0.6 % | ||
| CVE-2022-25622 | < V2.0.0 | The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the mi | HIGH 7.5 | 0.9 % | ||
| CVE-2019-10936 | < V1.2.0 | Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to | HIGH 7.5 | 2.1 % |