Skip to content
fr Sign in
7.5 High

CVE-2025-40820 Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values…

Description

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.

Affected products and versions

Product Affected versions Fixed in
SIDOOR ATD430W Versions not published
SIDOOR ATE530G COATED Versions not published
SIDOOR ATE530S COATED Versions not published
SIMATIC CFU DIQ 2.0 earliest → < 2.0.0 2.0.0
SIMATIC CFU PA 2.0 earliest → < 2.0.0 2.0.0
SIMATIC ET 200AL IM 157-1 PN Versions not published
SIMATIC ET 200clean, CM 8x IO-Link Versions not published
SIMATIC ET 200clean, DI 16x24VDC Versions not published
SIMATIC ET 200clean, DIQ 16x24VDC/0,5A Versions not published
Show the 136 other branches
Product Affected versions Fixed in
SIMATIC ET 200eco PN, AI 8xRTD/TC, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, CM 4x IO-Link, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, CM 8x IO-Link, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, DI 16x24VDC, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, DI 8x24VDC, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, DIQ 16x24VDC/2A, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, DQ 8x24VDC/0,5A, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200eco PN, DQ 8x24VDC/2A, M12-L 5.1 5.1.1 → latest No fix stated
SIMATIC ET 200MP IM 155-5 PN HF 4.2 4.2.0 → latest No fix stated
SIMATIC ET 200pro IM 154-8 PN/DP CPU Versions not published
SIMATIC ET 200pro IM 154-8F PN/DP CPU Versions not published
SIMATIC ET 200pro IM 154-8FX PN/DP CPU Versions not published
SIMATIC ET 200S IM 151-8 PN/DP CPU Versions not published
SIMATIC ET 200S IM 151-8F PN/DP CPU Versions not published
SIMATIC ET 200SP CPU 1510SP F-1 PN Versions not published
SIMATIC ET 200SP CPU 1510SP-1 PN Versions not published
SIMATIC ET 200SP CPU 1512SP F-1 PN Versions not published
SIMATIC ET 200SP CPU 1512SP-1 PN Versions not published
SIMATIC ET 200SP IM 155-6 MF HF Versions not published
SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) 1.3 earliest → < 1.3 1.3
SIMATIC ET 200SP IM 155-6 PN HF 4.2 4.2.0 → latest No fix stated
SIMATIC ET 200SP IM 155-6 PN/2 HF 4.2 4.2.0 → latest No fix stated
SIMATIC ET 200SP IM 155-6 PN/3 HF 4.2 4.2.0 → latest No fix stated
SIMATIC PN/MF Coupler Versions not published
SIMATIC PN/PN Coupler 6.0 earliest → < 6.0.0 6.0.0
SIMATIC Power Line Booster PLB, Base Module Versions not published
SIMATIC Power Line Booster PLB, Modem Module ST Versions not published
SIMATIC S7-1200 CPU 1211C AC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1211C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1211C DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1212C AC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1212C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1212C DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1212FC DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1212FC DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1214C AC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1214C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1214C DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1214FC DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1214FC DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1215C AC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1215C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1215C DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1215FC DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1215FC DC/DC/Rly 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1200 CPU 1217C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIMATIC S7-1500 CPU 1511-1 PN Versions not published
SIMATIC S7-1500 CPU 1511F-1 PN Versions not published
SIMATIC S7-1500 CPU 1513-1 PN Versions not published
SIMATIC S7-1500 CPU 1513F-1 PN Versions not published
SIMATIC S7-1500 CPU 1515-2 PN Versions not published
SIMATIC S7-1500 CPU 1515F-2 PN Versions not published
SIMATIC S7-1500 CPU 1516-3 PN/DP Versions not published
SIMATIC S7-1500 CPU 1516F-3 PN/DP Versions not published
SIMATIC S7-200 SMART CPU CR40 Versions not published
SIMATIC S7-200 SMART CPU CR60 Versions not published
SIMATIC S7-200 SMART CPU SR20 Versions not published
SIMATIC S7-200 SMART CPU SR30 Versions not published
SIMATIC S7-200 SMART CPU SR40 Versions not published
SIMATIC S7-200 SMART CPU SR60 Versions not published
SIMATIC S7-200 SMART CPU ST20 Versions not published
SIMATIC S7-200 SMART CPU ST30 Versions not published
SIMATIC S7-200 SMART CPU ST40 Versions not published
SIMATIC S7-200 SMART CPU ST60 Versions not published
SIMATIC S7-300 CPU 314C-2 PN/DP Versions not published
SIMATIC S7-300 CPU 315-2 PN/DP Versions not published
SIMATIC S7-300 CPU 315F-2 PN/DP Versions not published
SIMATIC S7-300 CPU 315T-3 PN/DP Versions not published
SIMATIC S7-300 CPU 317-2 PN/DP Versions not published
SIMATIC S7-300 CPU 317F-2 PN/DP Versions not published
SIMATIC S7-300 CPU 317T-3 PN/DP Versions not published
SIMATIC S7-300 CPU 317TF-3 PN/DP Versions not published
SIMATIC S7-300 CPU 319-3 PN/DP Versions not published
SIMATIC S7-300 CPU 319F-3 PN/DP Versions not published
SIMATIC S7-400 CPU 412-2 PN V7 Versions not published
SIMATIC S7-400 CPU 414-3 PN/DP V7 Versions not published
SIMATIC S7-400 CPU 414F-3 PN/DP V7 Versions not published
SIMATIC S7-400 CPU 416-3 PN/DP V7 Versions not published
SIMATIC S7-400 CPU 416F-3 PN/DP V7 Versions not published
SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) Versions not published
SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) 10.2 earliest → < 10.2 10.2
SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) 8.3 earliest → < 8.3 8.3
SIMATIC TDC CP51M1 Versions not published
SIMATIC TDC CPU555 Versions not published
SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants) Versions not published
SIMOCODE pro V PROFINET Versions not published
SINUMERIK 840D sl Versions not published
SIPLUS ET 200MP IM 155-5 PN HF 4.2 4.2.0 → latest No fix stated
SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL 4.2 4.2.0 → latest No fix stated
SIPLUS ET 200S IM 151-8 PN/DP CPU Versions not published
SIPLUS ET 200S IM 151-8F PN/DP CPU Versions not published
SIPLUS ET 200SP CPU 1512SP F-1 PN Versions not published
SIPLUS ET 200SP IM 155-6 PN HF 4.2 4.2.0 → latest No fix stated
SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL 4.2 4.2.0 → latest No fix stated
SIPLUS ET 200SP IM 155-6 PN HF TX RAIL 4.2 4.2.0 → latest No fix stated
SIPLUS HCS4200 CIM4210 Versions not published
SIPLUS HCS4200 CIM4210C Versions not published
SIPLUS HCS4300 CIM4310 Versions not published
SIPLUS NET PN/PN Coupler 6.0 earliest → < 6.0.0 6.0.0
SIPLUS S7-1200 CPU 1212 AC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1212 DC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1212C AC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1212C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214 AC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214 DC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214C AC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214C DC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214FC DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1214FC DC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1215 AC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1215 DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1215 DC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1215C AC/DC/RLY 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1215C DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1200 CPU 1215FC DC/DC/DC 4.4 earliest → < 4.4.0 4.4.0
SIPLUS S7-1500 CPU 1511-1 PN Versions not published
SIPLUS S7-1500 CPU 1511F-1 PN Versions not published
SIPLUS S7-1500 CPU 1513-1 PN Versions not published
SIPLUS S7-1500 CPU 1513F-1 PN Versions not published
SIPLUS S7-1500 CPU 1516-3 PN/DP Versions not published
SIPLUS S7-1500 CPU 1516F-3 PN/DP Versions not published
SIPLUS S7-300 CPU 314C-2 PN/DP Versions not published
SIPLUS S7-300 CPU 315-2 PN/DP Versions not published
SIPLUS S7-300 CPU 315F-2 PN/DP Versions not published
SIPLUS S7-300 CPU 317-2 PN/DP Versions not published
SIPLUS S7-300 CPU 317F-2 PN/DP Versions not published
SIPLUS S7-400 CPU 414-3 PN/DP V7 Versions not published
SIPLUS S7-400 CPU 416-3 PN/DP V7 Versions not published
SIWAREX WP231 Versions not published
SIWAREX WP241 Versions not published
SIWAREX WP251 Versions not published
SIWAREX WP521 ST Versions not published
SIWAREX WP522 ST Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIDOOR ATD430W

The 3 CVEs of SIDOOR ATD430W →
CVE-2024-23814 The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory… 5.3 Medium CVE-2019-19300 A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation… 7.5 High
Track this CVE