Bandwidth Limitation Flaw in SIPROTEC 5 Products by Siemens

CVE-2025-40570

What is CVE-2025-40570?

A vulnerability in the Siemens SIPROTEC 5 series allows unauthorized users with physical access to exploit the devices through the local USB port. By sending specially crafted high-bandwidth packets, an attacker can cause devices to exhaust memory resources and stop responding to network traffic. Affected devices will automatically reset following a successful exploitation, although their core protective functions remain intact.

References