Back to Database
Status published
High
CVE-2020-25241
A vulnerability has been identified in SIMATIC MV400 family (All...
Vulnerability Description
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-25241
Credits & Attribution
No credits recorded in the NVD database.
More from Siemens
View All →CVE-2025-41224
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All...
High
7.7
CVE-2025-41223
A vulnerability has been identified in RUGGEDCOM i800 (All versions),...
Medium
6.3
CVE-2025-41222
A vulnerability has been identified in RUGGEDCOM i800 (All versions),...
Medium
6.9
CVE-2025-40949
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...
High
8.9
CVE-2025-40948
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All...
Medium
6.1
Affected Vendor
Siemens
View all reports →Affected Software
SIMATIC MV400 family
Vulnerable Versions:
All Versions < V7.0.6
Timeline
Official Publish:
March 15th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.