Simatic S7 400 H V6 Cpu Family (Incl. Siplus Variants)
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_s7-400_h_v6_cpu_family_(incl._siplus_variants):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic S7 400 H V6 Cpu Family (Incl. Siplus Variants) (d248a85b-a00e-5c93-a0a7-800ae6d3133c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40833 |
vulnerable | 2026-06-08 07:25:06.188387 |
Details available
HIGH (7.5)
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
Published: 2026-05-12T08:20:46.879Z
Updated: 2026-07-14T09:19:07.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40820 |
vulnerable | 2026-06-08 07:25:05.939925 |
Details available
HIGH (7.5)
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.
Published: 2025-12-09T10:44:30.977Z
Updated: 2025-12-09T15:55:23.400Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23814 |
vulnerable | 2026-06-08 06:29:40.580871 |
Details available
MEDIUM (5.3)
The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.
Published: 2025-02-11T10:28:33.403Z
Updated: 2025-07-10T10:53:47.525Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25622 |
vulnerable | 2026-06-08 05:41:46.117979 |
Details available
MEDIUM (5.3)
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Published: 2022-04-12T00:00:00.000Z
Updated: 2025-04-21T13:54:36.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40368 |
vulnerable | 2026-06-08 05:35:17.847681 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414-2 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 DP V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-2 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416F-2 DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 417-4 DP V7 (All versions), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.10), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions < V10.1), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions < V8.2.3), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIPLUS S7-400 CPU 416-3 V7 (All versions), SIPLUS S7-400 CPU 417-4 V7 (All versions). Affected devices improperly handle specially crafted packets sent to port 102/tcp.
This could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations.
Published: 2022-04-12T09:07:23.000Z
Updated: 2025-04-21T13:54:27.056Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10936 |
vulnerable | 2026-06-08 05:12:25.851663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4843 |
vulnerable | 2026-06-08 05:11:49.756577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16557 |
vulnerable | 2026-06-08 05:11:05.074042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16556 |
vulnerable | 2026-06-08 05:11:05.059527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2681 |
vulnerable | 2026-06-08 05:09:25.268608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2680 |
vulnerable | 2026-06-08 05:09:25.093648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.