Information Disclosure Vulnerability in SIMATIC CN 4100 by Siemens

CVE-2025-40938

What is CVE-2025-40938?

A security flaw exists in the SIMATIC CN 4100, where sensitive information is improperly stored in the firmware. This exposure may allow unauthorized individuals to gain access to confidential data, undermining the device’s confidentiality, integrity, and availability. Users of affected versions are urged to update their devices to the latest firmware to mitigate potential risks.

References