VULNERABILITY INTELLIGENCE

CVE-2020-25241

CVSS score7.5 HIGH
EPSS probability1.07%
CISA KEVNot currently listed
Published2021-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.

Weakness classification

  • productcert@siemens.com: CWE-1285
  • nvd@nist.gov: CWE-129

Primary references