Siemens SIMATIC CFU PA

• CVE-2025-40820 High 7.5 Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to inter 0.5%
• CVE-2024-23814 Medium 5.3 The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembl 0.6%
• CVE-2022-25622 Medium 5.3 The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could al 0.9%