CVE-2025-40820
- State
- Published
- Severity
- 8.7 High
- Published
- Dec 9, 2025
- Updated
- Dec 9, 2025
- Reserved
- Apr 16, 2025
Description
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | siemens |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | siemens |
Weaknesses
- CWE-940 Improper Verification of Source of a Communication Channel
Affected Products
| Product | Versions |
|---|---|
SIDOOR ATD430WSiemens |
|
SIDOOR ATE530G COATEDSiemens |
|
SIDOOR ATE530S COATEDSiemens |
|
SIMATIC CFU DIQSiemens |
|
SIMATIC CFU PASiemens |
|
SIMATIC CFU PASiemens |
|
SIMATIC ET 200AL IM 157-1 PNSiemens |
|
SIMATIC ET 200clean, CM 8x IO-LinkSiemens |
|
SIMATIC ET 200clean, DI 16x24VDCSiemens |
|
SIMATIC ET 200clean, DIQ 16x24VDC/0,5ASiemens |
|
SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-LSiemens |
|
SIMATIC ET 200eco PN, CM 4x IO-Link, M12-LSiemens |
|
SIMATIC ET 200eco PN, CM 8x IO-Link, M12-LSiemens |
|
SIMATIC ET 200eco PN, CM 8x IO-Link, M12-LSiemens |
|
SIMATIC ET 200eco PN, DI 16x24VDC, M12-LSiemens |
|
SIMATIC ET 200eco PN, DI 8x24VDC, M12-LSiemens |
|
SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-LSiemens |
|
SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-LSiemens |
|
SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-LSiemens |
|
SIMATIC ET 200MP IM 155-5 PN HFSiemens |
|
SIMATIC ET 200pro IM 154-8 PN/DP CPUSiemens |
|
SIMATIC ET 200pro IM 154-8F PN/DP CPUSiemens |
|
SIMATIC ET 200pro IM 154-8FX PN/DP CPUSiemens |
|
SIMATIC ET 200S IM 151-8 PN/DP CPUSiemens |
|
SIMATIC ET 200S IM 151-8F PN/DP CPUSiemens |
|
SIMATIC ET 200SP CPU 1510SP F-1 PNSiemens |
|
SIMATIC ET 200SP CPU 1510SP-1 PNSiemens |
|
SIMATIC ET 200SP CPU 1512SP F-1 PNSiemens |
|
SIMATIC ET 200SP CPU 1512SP-1 PNSiemens |
|
SIMATIC ET 200SP IM 155-6 MF HFSiemens |
|
SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)Siemens |
|
SIMATIC ET 200SP IM 155-6 PN HFSiemens |
|
SIMATIC ET 200SP IM 155-6 PN/2 HFSiemens |
|
SIMATIC ET 200SP IM 155-6 PN/3 HFSiemens |
|
SIMATIC PN/MF CouplerSiemens |
|
SIMATIC PN/PN CouplerSiemens |
|
SIMATIC Power Line Booster PLB, Base ModuleSiemens |
|
SIMATIC Power Line Booster PLB, Modem Module STSiemens |
|
SIMATIC S7-1200 CPU 1211C AC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1211C DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1211C DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1212C AC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1212C DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1212C DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1212FC DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1212FC DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1214C AC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1214C DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1214C DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1214FC DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1214FC DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1215C AC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1215C DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1215C DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1215FC DC/DC/DCSiemens |
|
SIMATIC S7-1200 CPU 1215FC DC/DC/RlySiemens |
|
SIMATIC S7-1200 CPU 1217C DC/DC/DCSiemens |
|
SIMATIC S7-1500 CPU 1511-1 PNSiemens |
|
SIMATIC S7-1500 CPU 1511F-1 PNSiemens |
|
SIMATIC S7-1500 CPU 1513-1 PNSiemens |
|
SIMATIC S7-1500 CPU 1513F-1 PNSiemens |
|
SIMATIC S7-1500 CPU 1515-2 PNSiemens |
|
SIMATIC S7-1500 CPU 1515F-2 PNSiemens |
|
SIMATIC S7-1500 CPU 1516-3 PN/DPSiemens |
|
SIMATIC S7-1500 CPU 1516F-3 PN/DPSiemens |
|
SIMATIC S7-200 SMART CPU CR40Siemens |
|
SIMATIC S7-200 SMART CPU CR60Siemens |
|
SIMATIC S7-200 SMART CPU SR20Siemens |
|
SIMATIC S7-200 SMART CPU SR20Siemens |
|
SIMATIC S7-200 SMART CPU SR30Siemens |
|
SIMATIC S7-200 SMART CPU SR30Siemens |
|
SIMATIC S7-200 SMART CPU SR40Siemens |
|
SIMATIC S7-200 SMART CPU SR40Siemens |
|
SIMATIC S7-200 SMART CPU SR60Siemens |
|
SIMATIC S7-200 SMART CPU SR60Siemens |
|
SIMATIC S7-200 SMART CPU ST20Siemens |
|
SIMATIC S7-200 SMART CPU ST20Siemens |
|
SIMATIC S7-200 SMART CPU ST30Siemens |
|
SIMATIC S7-200 SMART CPU ST30Siemens |
|
SIMATIC S7-200 SMART CPU ST40Siemens |
|
SIMATIC S7-200 SMART CPU ST40Siemens |
|
SIMATIC S7-200 SMART CPU ST60Siemens |
|
SIMATIC S7-200 SMART CPU ST60Siemens |
|
SIMATIC S7-300 CPU 314C-2 PN/DPSiemens |
|
SIMATIC S7-300 CPU 315-2 PN/DPSiemens |
|
SIMATIC S7-300 CPU 315F-2 PN/DPSiemens |
|
SIMATIC S7-300 CPU 315T-3 PN/DPSiemens |
|
SIMATIC S7-300 CPU 317-2 PN/DPSiemens |
|
SIMATIC S7-300 CPU 317F-2 PN/DPSiemens |
|
SIMATIC S7-300 CPU 317T-3 PN/DPSiemens |
|
SIMATIC S7-300 CPU 317TF-3 PN/DPSiemens |
|
SIMATIC S7-300 CPU 319-3 PN/DPSiemens |
|
SIMATIC S7-300 CPU 319F-3 PN/DPSiemens |
|
SIMATIC S7-400 CPU 412-2 PN V7Siemens |
|
SIMATIC S7-400 CPU 414-3 PN/DP V7Siemens |
|
SIMATIC S7-400 CPU 414F-3 PN/DP V7Siemens |
|
SIMATIC S7-400 CPU 416-3 PN/DP V7Siemens |
|
SIMATIC S7-400 CPU 416F-3 PN/DP V7Siemens |
|
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)Siemens |
|
SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)Siemens |
|
SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)Siemens |
|
SIMATIC TDC CP51M1Siemens |
|
SIMATIC TDC CPU555Siemens |
|
SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)Siemens |
|
SIMOCODE pro V PROFINETSiemens |
|
SINUMERIK 840D slSiemens |
|
SIPLUS ET 200MP IM 155-5 PN HFSiemens |
|
SIPLUS ET 200MP IM 155-5 PN HFSiemens |
|
SIPLUS ET 200MP IM 155-5 PN HF T1 RAILSiemens |
|
SIPLUS ET 200S IM 151-8 PN/DP CPUSiemens |
|
SIPLUS ET 200S IM 151-8F PN/DP CPUSiemens |
|
SIPLUS ET 200SP CPU 1512SP F-1 PNSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HFSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HFSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HFSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HFSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HF T1 RAILSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HF T1 RAILSiemens |
|
SIPLUS ET 200SP IM 155-6 PN HF TX RAILSiemens |
|
SIPLUS HCS4200 CIM4210Siemens |
|
SIPLUS HCS4200 CIM4210CSiemens |
|
SIPLUS HCS4300 CIM4310Siemens |
|
SIPLUS NET PN/PN CouplerSiemens |
|
SIPLUS S7-1200 CPU 1212 AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1212 DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1212 DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1212C AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1212C DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1212C DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1212C DC/DC/DC RAILSiemens |
|
SIPLUS S7-1200 CPU 1214 AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1214 DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1214C AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1214C AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1214C DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1214C DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1214C DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1214C DC/DC/DC RAILSiemens |
|
SIPLUS S7-1200 CPU 1214C DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1214C DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1214FC DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1214FC DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215 AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215 AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215 DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1215 DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1215 DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215 DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215 DC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215C AC/DC/RLYSiemens |
|
SIPLUS S7-1200 CPU 1215C DC/DC/DCSiemens |
|
SIPLUS S7-1200 CPU 1215FC DC/DC/DCSiemens |
|
SIPLUS S7-1500 CPU 1511-1 PNSiemens |
|
SIPLUS S7-1500 CPU 1511F-1 PNSiemens |
|
SIPLUS S7-1500 CPU 1513-1 PNSiemens |
|
SIPLUS S7-1500 CPU 1513F-1 PNSiemens |
|
SIPLUS S7-1500 CPU 1516-3 PN/DPSiemens |
|
SIPLUS S7-1500 CPU 1516-3 PN/DPSiemens |
|
SIPLUS S7-1500 CPU 1516F-3 PN/DPSiemens |
|
SIPLUS S7-300 CPU 314C-2 PN/DPSiemens |
|
SIPLUS S7-300 CPU 315-2 PN/DPSiemens |
|
SIPLUS S7-300 CPU 315F-2 PN/DPSiemens |
|
SIPLUS S7-300 CPU 317-2 PN/DPSiemens |
|
SIPLUS S7-300 CPU 317F-2 PN/DPSiemens |
|
SIPLUS S7-400 CPU 414-3 PN/DP V7Siemens |
|
SIPLUS S7-400 CPU 416-3 PN/DP V7Siemens |
|
SIWAREX WP231Siemens |
|
SIWAREX WP241Siemens |
|
SIWAREX WP251Siemens |
|
SIWAREX WP521 STSiemens |
|
SIWAREX WP522 STSiemens |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.