Data Transmission Vulnerability in SIRIUS Safety Relays and Modular Safety System
CVE-2025-24008

8.7HIGH

Key Information:

Vendor

Siemens
Status
Sirius 3rk3 Modular Safety System (mss)
Sirius Safety Relays 3sk2
Vendor
CVE Published:
13 May 2025

What is CVE-2025-24008?

A security flaw has been detected in the SIRIUS 3RK3 Modular Safety System and SIRIUS Safety Relays 3SK2, affecting all versions. This vulnerability arises from the lack of encryption for data transmitted over the network, potentially allowing unauthorized users to intercept communications. Attackers gaining network access could glean sensitive data, including obfuscated safety passwords, which compromises the integrity of safety measures within the system.

Affected Version(s)

SIRIUS 3RK3 Modular Safety System (MSS) 0

SIRIUS Safety Relays 3SK2 0

References

https://cert-portal.siemens.com/productcert/html/ssa-2227...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.