Vulnerability in POWER METER SICAM Q100 and Q200 by Siemens

CVE-2025-40753

What is CVE-2025-40753?

A vulnerability has been detected in Siemens' POWER METER SICAM Q100 and Q200 lines, where versions of the devices export SMTP account passwords in plain text within the configuration file. This flaw could grant an authenticated local attacker the ability to extract these credentials, utilizing the SMTP service for unauthorized activities, potentially compromising system integrity and security.

References