Inconsistent SNMP Behavior in SIMATIC CN 4100 by Siemens

CVE-2025-40940

What is CVE-2025-40940?

A vulnerability exists in the SIMATIC CN 4100 where inconsistent behavior in the Simple Network Management Protocol (SNMP) may lead to unexpected service availability and unreliable configuration handling across different protocol versions. This vulnerability can expose sensitive information, creating significant risks for data confidentiality and system integrity. It is essential for users of SIMATIC CN 4100 to review their configurations and apply necessary security measures.

References