The vulnerability identified as CVE-2026-22924 affects Siemens SIMATIC CN 4100 versions before V5.0. It is classified under CWE-306 (Missing Authentication for Critical Function). The affected software does not adequately restrict unauthenticated access, which can be exploited to cause resource exhaustion. This may result in denial of service or unauthorized actions compromising system integrity. The CVSS v3.1 score is 9.1, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on integrity and availability. No patch or official remediation level has been disclosed by Siemens.

The vulnerability allows unauthenticated attackers to connect to the affected system and potentially exhaust resources, leading to disruption of normal operations. This can cause denial of service conditions and unauthorized actions that compromise system integrity and availability. Confidentiality is not impacted according to the CVSS vector. The critical severity indicates a high risk to affected environments if exploited.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider restricting network access to the affected SIMATIC CN 4100 devices to trusted sources only and monitor for unusual connection attempts. Avoid exposing the device directly to untrusted networks. Follow Siemens advisories for updates.