Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_et_200clean,_diq_16x24vdc/0,5a:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Et 200Clean, Diq 16X24Vdc/0,5A (31ad0072-472f-5f53-8a2e-f16df48c4bee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40820 vulnerable 2026-06-08 07:25:05.851195 Details available
HIGH (7.5)
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.
Published: 2025-12-09T10:44:30.977Z
Updated: 2025-12-09T15:55:23.400Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.