Skip to content

Vulnerabilities of Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

Is your version affected?

CVE Summary Score Published
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests 7.5 High May 12, 2026
CVE-2025-40820 Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values… 7.5 High Dec 9, 2025
CVE-2024-23814 The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory… 5.3 Medium Feb 11, 2025
CVE-2021-40368 A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7… 7.5 High Apr 12, 2022
CVE-2022-25622 The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP… 5.3 Medium Apr 12, 2022
CVE-2019-10936 Affected devices improperly handle large amounts of specially crafted UDP packets 7.5 High Oct 10, 2019
CVE-2018-16557 A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7… 8.2 High Dec 13, 2018
CVE-2018-16556 A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7… 7.5 High Dec 13, 2018
CVE-2018-4843 A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU… 6.5 Medium Mar 20, 2018
CVE-2017-2681 Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a… 6.5 Medium May 11, 2017
CVE-2017-2680 Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a… 6.5 Medium May 11, 2017

Other Siemens products