Simatic S7 400 Cpu 412 2 Pn V7
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_s7-400_cpu_412-2_pn_v7:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic S7 400 Cpu 412 2 Pn V7 (0f4e02b2-2ab7-5882-af6b-844e7564d930) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40833 |
vulnerable | 2026-06-08 07:25:06.188143 |
Details available
HIGH (7.5)
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
Published: 2026-05-12T08:20:46.879Z
Updated: 2026-07-14T09:19:07.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40820 |
vulnerable | 2026-06-08 07:25:05.935239 |
Details available
HIGH (7.5)
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.
Published: 2025-12-09T10:44:30.977Z
Updated: 2025-12-09T15:55:23.400Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47375 |
vulnerable | 2026-06-08 05:50:40.248121 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly.
This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
Published: 2023-12-12T11:25:32.533Z
Updated: 2024-08-03T14:55:07.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47374 |
vulnerable | 2026-06-08 05:50:40.214346 |
Details available
HIGH (7.5)
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly.
This could allow an attacker to exhaust system resources and create a denial of service condition for the device.
Published: 2023-12-12T11:25:31.314Z
Updated: 2026-02-25T16:34:35.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25622 |
vulnerable | 2026-06-08 05:41:46.113810 |
Details available
MEDIUM (5.3)
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.
This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.
Published: 2022-04-12T00:00:00.000Z
Updated: 2025-04-21T13:54:36.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10936 |
vulnerable | 2026-06-08 05:12:25.849322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10923 |
vulnerable | 2026-06-08 05:12:25.583700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4843 |
vulnerable | 2026-06-08 05:11:49.755772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16557 |
vulnerable | 2026-06-08 05:11:05.073956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16556 |
vulnerable | 2026-06-08 05:11:05.057694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.