What’s Vulnerable › Vulnerabilities

CVE-2020-25241

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-15 · updated 2026-06-17
• Weakness: CWE-1285

Description

A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.

Affected products

• Siemens Simatic Mv420 Sr-B Body Firmware: before 7.0.6 — fixed in 7.0.6
• Siemens Simatic Mv420 Sr-B Firmware: before 7.0.6 — fixed in 7.0.6
• Siemens Simatic Mv420 Sr-P Body Firmware: before 7.0.6 — fixed in 7.0.6
• Siemens Simatic Mv420 Sr-P Firmware: before 7.0.6 — fixed in 7.0.6
• Siemens Simatic Mv440 Hr Firmware: before 7.0.6 — fixed in 7.0.6
• Siemens Simatic Mv440 Sr Firmware: before 7.0.6 — fixed in 7.0.6
• Siemens Simatic Mv440 Ur Firmware: before 7.0.6 — fixed in 7.0.6

How to fix

Upgrade to a fixed version: Siemens Simatic Mv420 Sr-B Body Firmware 7.0.6; Siemens Simatic Mv420 Sr-B Firmware 7.0.6; Siemens Simatic Mv420 Sr-P Body Firmware 7.0.6; Siemens Simatic Mv420 Sr-P Firmware 7.0.6; Siemens Simatic Mv440 Hr Firmware 7.0.6; Siemens Simatic Mv440 Sr Firmware 7.0.6; Siemens Simatic Mv440 Ur Firmware 7.0.6. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf

Get alerted when CVE-2020-25241 or the next vulnerability affects your stack