CVE-2025-40820

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.

• CWE-940

• https://cert-portal.siemens.com/productcert/html/ssa-915282.html

Published

Dec 9, 2025

Last Modified

Oct 7, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-40815A vulnerability has been identified in LOGO! 12/24RCE (6ED10…7.2
• CVE-2025-40816A vulnerability has been identified in LOGO! 12/24RCE (6ED10…7.6
• CVE-2025-40817A vulnerability has been identified in LOGO! 12/24RCE (6ED10…6.5
• CVE-2025-40818A vulnerability has been identified in SINEMA Remote Connect…3.3
• CVE-2025-40819A vulnerability has been identified in SINEMA Remote Connect…4.3
• CVE-2025-4082Modification of specific WebGL shader attributes could trigg…5.9
• CVE-2025-40827A vulnerability has been identified in Siemens Software Cent…7.8
• CVE-2025-40829A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2025-4083A process isolation vulnerability in Thunderbird stemmed fro…9.1
• CVE-2025-40830A vulnerability has been identified in SINEC Security Monito…6.7
• CVE-2025-40831A vulnerability has been identified in SINEC Security Monito…6.5
• CVE-2025-40833The affected devices contain a null pointer dereference vuln…7.5