Vulnerabilities of Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-40833	The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests	7.5 High	May 12, 2026
CVE-2025-40820	Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values…	7.5 High	Dec 9, 2025
CVE-2024-23814	The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory…	5.3 Medium	Feb 11, 2025
CVE-2021-40368	A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7…	7.5 High	Apr 12, 2022
CVE-2022-25622	The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP…	5.3 Medium	Apr 12, 2022
CVE-2019-19300	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation…	7.5 High	Apr 14, 2020
CVE-2019-10936	Affected devices improperly handle large amounts of specially crafted UDP packets	7.5 High	Oct 10, 2019
CVE-2017-12741	Specially crafted packets sent to port 161/udp could cause a denial of service condition	7.5 High	Dec 26, 2017