SQL Injection Vulnerability in OZW672 and OZW772 Devices by Siemens
CVE-2025-26390

9.3CRITICAL

Key Information:

Vendor

Siemens
Status
Ozw672
Ozw772
Vendor
CVE Published:
13 May 2025

What is CVE-2025-26390?

A significant vulnerability has been discovered in the OZW672 and OZW772 devices by Siemens, specifically in all versions prior to V6.0. The affected web services of these devices exhibit SQL injection flaws during authentication processes. This alarming weakness could enable an unauthenticated remote adversary to bypass authentication checks, potentially gaining unauthorized administrative access. Organizations using these devices should prioritize immediate assessment and remediation to ensure system integrity and protect against exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

OZW672 0

OZW772 0

References

https://cert-portal.siemens.com/productcert/html/ssa-0474...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.