CVE-2026-22924CWE-306

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)

High · published May 12, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions.

This could allow an attacker to disrupt normal operations or perform unauthorized actions, potentially impacting system availability and integrity.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00300 · 21.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-05-12T08:20Z
EPSS history
Timeline
  • 12 MAY 08:20Z
    A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)
    cvelistv5