Information Disclosure Vulnerability in SIMATIC CN 4100 by Siemens
CVE-2025-40938
9.2CRITICAL
What is CVE-2025-40938?
A security flaw exists in the SIMATIC CN 4100, where sensitive information is improperly stored in the firmware. This exposure may allow unauthorized individuals to gain access to confidential data, undermining the device’s confidentiality, integrity, and availability. Users of affected versions are urged to update their devices to the latest firmware to mitigate potential risks.
Affected Version(s)
SIMATIC CN 4100 0
References
CVSS V4
Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved