Information Exposure Vulnerability in SIMATIC CN 4100 by Siemens

CVE-2025-40941

What is CVE-2025-40941?

A vulnerability has been found within the SIMATIC CN 4100, affecting all versions prior to V4.0.1. This issue results in the exposure of sensitive server information through its response messages. As a result, an attacker with access to the network could exploit this vulnerability to gather critical data, potentially facilitating targeted attacks on the system. It is essential for organizations using this product to prioritize updates to safeguard their network security.

References