CVE-2025-40594

CRITIQUE 9.8CVE-2025-40594 · Published 09/09/2025 · updated 23/10/2026

En bref

CVE-2025-40594 est une vulnérabilité CRITIQUE (CVSS 9.8).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.21%, plus élevée que 11.0% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.

References

cert-portal.siemens.com/productcert/html/ssa-027652.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free