Session Management Flaw in SIMATIC PCS neo Products by Siemens

CVE-2025-40566

What is CVE-2025-40566?

A session management flaw has been discovered in SIMATIC PCS neo products, specifically in versions prior to V4.1 Update 3 and V5.0 Update 1. This vulnerability arises from improper invalidation of user sessions upon user logout. Consequently, an attacker with access to a legitimate session token can potentially exploit this flaw to re-establish a user's session, undermining the security of user data and access. It is crucial for users to ensure they are running the latest updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References