SC
Product
SIMATIC CN 4100
On CISA KEVExploited in the wild
67
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 30Medium 34Low 0
Watch
Add SIMATIC CN 4100 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: before V6.0 |
| CVE-2026-28387 | 8.1 | Apr 7 | Potential Use-after-free in DANE Client Code Affected: before V5.0 |
| CVE-2025-39866 | 7.8 | Sep 19 | fs: writeback: fix use-after-free in __mark_inode_dirty() Affected: before V5.0 |
| CVE-2025-39860 | 7.8 | Sep 19 | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() Affected: before V5.0 |
| CVE-2025-39790 | 7.8 | Sep 11 | bus: mhi: host: Detect events pointing to unexpected TREs Affected: before V5.0 |
| CVE-2025-39783 | 7.8 | Sep 11 | PCI: endpoint: Fix configfs group list head handling Affected: before V5.0 |
| CVE-2025-39776 | 7.8 | Sep 11 | mm/debug_vm_pgtable: clear page table entries at destroy_args() Affected: before V5.0 |
| CVE-2025-39738 | 7.8 | Sep 11 | btrfs: do not allow relocation of partially dropped subvolumes Affected: before V5.0 |
| CVE-2025-39691 | 7.8 | Sep 5 | fs/buffer: fix use-after-free when call bh_read() helper Affected: before V5.0 |
| CVE-2025-39689 | 7.8 | Sep 5 | ftrace: Also allocate and copy hash for reading of filter files Affected: before V5.0 |
| CVE-2025-38724 | 7.8 | Sep 4 | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Affected: before V5.0 |
| CVE-2025-38708 | 7.8 | Sep 4 | drbd: add missing kref_get in handle_write_conflicts Affected: before V5.0 |
| CVE-2025-38702 | 7.8 | Sep 4 | fbdev: fix potential buffer overflow in do_register_framebuffer() Affected: before V5.0 |
| CVE-2025-38685 | 7.8 | Sep 4 | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit Affected: before V5.0 |
| CVE-2024-58240 | 7.8 | Aug 28 | tls: separate no-async decryption request handling from async Affected: before V5.0 |
| CVE-2025-38552 | 7.8 | Aug 16 | mptcp: plug races between subflow fail and subflow creation Affected: before V5.0 |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: before V5.0 |
| CVE-2026-22925 | 7.5 | May 12 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0) Affected: before V5.0 |
| CVE-2026-31790 | 7.5 | Apr 7 | Incorrect Failure Handling in RSA KEM RSASVE Encapsulation Affected: before V5.0 |
| CVE-2026-28390 | 7.5 | Apr 7 | Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo Affected: before V5.0 |
| CVE-2026-28389 | 7.5 | Apr 7 | Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo Affected: before V5.0 |
| CVE-2026-28388 | 7.5 | Apr 7 | NULL Pointer Dereference When Processing a Delta CRL Affected: before V5.0 |
| CVE-2025-9230 | 7.5 | Sep 30 | Out-of-bounds read & write in RFC 3211 KEK Unwrap Affected: before V5.0 |
| CVE-2025-6021 | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Affected: before V5.0 |
| CVE-2025-39683 | 7.1 | Sep 5 | tracing: Limit access to parser->buffer when trace_get_user failed Affected: before V5.0 |
| CVE-2025-38736 | 7.1 | Sep 5 | net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Affected: before V5.0 |
| CVE-2025-38728 | 7.1 | Sep 4 | smb3: fix for slab out of bounds on mount to ksmbd Affected: before V5.0 |
| CVE-2025-38502 | 7.1 | Aug 16 | bpf: Fix oob access in cgroup local storage Affected: before V5.0 |
| CVE-2025-39826 | 7.0 | Sep 16 | net: rose: convert 'use' field to refcount_t Affected: before V5.0 |
| CVE-2025-39702 | 7.0 | Sep 5 | ipv6: sr: Fix MAC comparison to be constant-time Affected: before V5.0 |
Showing 30
