Siemens SINAMICS Drives
view advisory published 2025-09-09
Siemens SINAMICS G220, SINAMICS S210, and SINAMICS S200 contains a privilege escalation vulnerability that could allow users to escalate their privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40594US | critical9.8 | — | ||
A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-027652: Privilege Escalation Vulnerability in SINAMICS Drives - CSAF Versionself
- SSA-027652: Privilege Escalation Vulnerability in SINAMICS Drives - HTML Versionself
- ICS Advisory ICSA-25-254-03 JSONself
- ICS Advisory ICSA-25-254-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (3)
- FixedSINAMICS G220 V6.4
Update to V6.4 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109983183/ - FixedSINAMICS S200 V6.4
Update to V6.4 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/110000221/ - FixedSINAMICS S210 V6.4
Update to V6.4 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109978915/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan