Siemens SIMATIC CN 4100
view advisory published 2025-12-09
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40941US | medium4.3 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses.
This could allow an attacker with… | ||||
| CVE-2025-40940US | — | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availabilit… | ||||
| CVE-2025-40939US | — | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow a… | ||||
| CVE-2025-40938US | critical9.8OT elevated | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to ac… | ||||
| CVE-2025-40937US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in imp… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1 - CSAF Versionself
- SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1 - HTML Versionself
- ICS Advisory ICSA-26-015-12 JSONself
- ICS Advisory ICSA-26-015-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (5)
- FixedSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - FixedSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan