Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-40820

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range.

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V2.0.0, V1.3, V6.0.0, V4.4.0, V10.2, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Siemens SIDOOR ATD430W

    All versions

  • Siemens SIDOOR ATE530G COATED

    All versions

  • Siemens SIDOOR ATE530S COATED

    All versions

  • Siemens SIMATIC CFU DIQ

    fixed in V2.0.0

  • Siemens SIMATIC CFU PA

    fixed in V2.0.0

  • Siemens SIMATIC CFU PA

    fixed in V2.0.0

  • Siemens SIMATIC ET 200AL IM 157-1 PN

    All versions

  • Siemens SIMATIC ET 200clean, CM 8x IO-Link

    All versions

  • Siemens SIMATIC ET 200clean, DI 16x24VDC

    All versions

  • Siemens SIMATIC ET 200clean, DIQ 16x24VDC/0,5A

    All versions

  • Siemens SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, DI 16x24VDC, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, DI 8x24VDC, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L

    From V5.1.1

  • Siemens SIMATIC ET 200MP IM 155-5 PN HF

    From V4.2.0

  • Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU

    All versions

  • Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU

    All versions

  • Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU

    All versions

  • Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU

    All versions

  • Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU

    All versions

  • Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN

    All versions

  • Siemens SIMATIC ET 200SP CPU 1510SP-1 PN

    All versions

  • Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN

    All versions

  • Siemens SIMATIC ET 200SP CPU 1512SP-1 PN

    All versions

  • Siemens SIMATIC ET 200SP IM 155-6 MF HF

    All versions

  • Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)

    fixed in V1.3

  • Siemens SIMATIC ET 200SP IM 155-6 PN HF

    From V4.2.0

  • Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF

    From V4.2.0

  • Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF

    From V4.2.0

  • Siemens SIMATIC PN/MF Coupler

    All versions

  • Siemens SIMATIC PN/PN Coupler

    fixed in V6.0.0

  • Siemens SIMATIC Power Line Booster PLB, Base Module

    All versions

  • Siemens SIMATIC Power Line Booster PLB, Modem Module ST

    All versions

  • Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1211C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1211C DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1212C AC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1212C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1212C DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1212FC DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1214C AC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1214C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1214C DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1215C AC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1215C DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/Rly

    fixed in V4.4.0

  • Siemens SIMATIC S7-1200 CPU 1217C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIMATIC S7-1500 CPU 1511-1 PN

    All versions

  • Siemens SIMATIC S7-1500 CPU 1511F-1 PN

    All versions

  • Siemens SIMATIC S7-1500 CPU 1513-1 PN

    All versions

  • Siemens SIMATIC S7-1500 CPU 1513F-1 PN

    All versions

  • Siemens SIMATIC S7-1500 CPU 1515-2 PN

    All versions

  • Siemens SIMATIC S7-1500 CPU 1515F-2 PN

    All versions

  • Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP

    All versions

  • Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP

    All versions

  • Siemens SIMATIC S7-200 SMART CPU CR40

    All versions

  • Siemens SIMATIC S7-200 SMART CPU CR60

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR20

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR20

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR30

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR30

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR40

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR40

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR60

    All versions

  • Siemens SIMATIC S7-200 SMART CPU SR60

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST20

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST20

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST30

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST30

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST40

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST40

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST60

    All versions

  • Siemens SIMATIC S7-200 SMART CPU ST60

    All versions

  • Siemens SIMATIC S7-300 CPU 314C-2 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 315-2 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 315F-2 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 315T-3 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 317-2 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 317F-2 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 317T-3 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 319-3 PN/DP

    All versions

  • Siemens SIMATIC S7-300 CPU 319F-3 PN/DP

    All versions

  • Siemens SIMATIC S7-400 CPU 412-2 PN V7

    All versions

  • Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7

    All versions

  • Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7

    All versions

  • Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7

    All versions

  • Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7

    All versions

  • Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

    All versions

  • Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

    fixed in V10.2

  • Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

    fixed in V8.3

  • Siemens SIMATIC TDC CP51M1

    All versions

  • Siemens SIMATIC TDC CPU555

    All versions

  • Siemens SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants)

    All versions

  • Siemens SIMOCODE pro V PROFINET

    All versions

  • Siemens SINUMERIK 840D sl

    All versions

  • Siemens SIPLUS ET 200MP IM 155-5 PN HF

    From V4.2.0

  • Siemens SIPLUS ET 200MP IM 155-5 PN HF

    From V4.2.0

  • Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL

    From V4.2.0

  • Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU

    All versions

  • Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU

    All versions

  • Siemens SIPLUS ET 200SP CPU 1512SP F-1 PN

    All versions

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF

    From V4.2.0

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF

    From V4.2.0

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF

    From V4.2.0

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF

    From V4.2.0

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL

    From V4.2.0

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL

    From V4.2.0

  • Siemens SIPLUS ET 200SP IM 155-6 PN HF TX RAIL

    From V4.2.0

  • Siemens SIPLUS HCS4200 CIM4210

    All versions

  • Siemens SIPLUS HCS4200 CIM4210C

    All versions

  • Siemens SIPLUS HCS4300 CIM4310

    All versions

  • Siemens SIPLUS NET PN/PN Coupler

    fixed in V6.0.0

  • Siemens SIPLUS S7-1200 CPU 1212 AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1212 DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1212C AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214 AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214 DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214C DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1214FC DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215 DC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215C AC/DC/RLY

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215C DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1200 CPU 1215FC DC/DC/DC

    fixed in V4.4.0

  • Siemens SIPLUS S7-1500 CPU 1511-1 PN

    All versions

  • Siemens SIPLUS S7-1500 CPU 1511F-1 PN

    All versions

  • Siemens SIPLUS S7-1500 CPU 1513-1 PN

    All versions

  • Siemens SIPLUS S7-1500 CPU 1513F-1 PN

    All versions

  • Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP

    All versions

  • Siemens SIPLUS S7-1500 CPU 1516-3 PN/DP

    All versions

  • Siemens SIPLUS S7-1500 CPU 1516F-3 PN/DP

    All versions

  • Siemens SIPLUS S7-300 CPU 314C-2 PN/DP

    All versions

  • Siemens SIPLUS S7-300 CPU 315-2 PN/DP

    All versions

  • Siemens SIPLUS S7-300 CPU 315F-2 PN/DP

    All versions

  • Siemens SIPLUS S7-300 CPU 317-2 PN/DP

    All versions

  • Siemens SIPLUS S7-300 CPU 317F-2 PN/DP

    All versions

  • Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7

    All versions

  • Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7

    All versions

  • Siemens SIWAREX WP231

    All versions

  • Siemens SIWAREX WP241

    All versions

  • Siemens SIWAREX WP251

    All versions

  • Siemens SIWAREX WP521 ST

    All versions

  • Siemens SIWAREX WP522 ST

    All versions

References 1

cert-portal.siemens.com