Man-in-the-Middle Vulnerability in Siemens Software Products

CVE-2025-40801

What is CVE-2025-40801?

A vulnerability exists in the SALT SDK used across various Siemens software products due to missing server certificate validation during TLS connections to the authorization server. This flaw could allow malicious actors to execute man-in-the-middle attacks, intercepting and potentially altering communications between clients and the server. Users of affected products should take immediate action to mitigate this risk by monitoring their systems and applying necessary updates.

References