SSA-177847: Improper VNC Password Check Vulnerability in SINUMERIK Controllers
Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40743US | —OT elevated | — | ||
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5… | ||||
references
External citations — patches, advisories, analysis.
remediations (14)
- MitigationSINUMERIK 828D PPU.4
Apply Defense-in-Depth
- MitigationSINUMERIK 828D PPU.5
Apply Defense-in-Depth
- MitigationSINUMERIK 840D sl
Apply Defense-in-Depth
- MitigationSINUMERIK MC
Apply Defense-in-Depth
- MitigationSINUMERIK MC V1.15
Apply Defense-in-Depth
- MitigationSINUMERIK ONE
Apply Defense-in-Depth
- MitigationSINUMERIK ONE V6.15
Apply Defense-in-Depth
- FixedSINUMERIK 828D PPU.4
Update to V4.95 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedSINUMERIK 828D PPU.5
Update to V5.25 SP1 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedSINUMERIK 840D sl
Update to V4.95 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedSINUMERIK MC
Update to V1.25 SP1 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedSINUMERIK MC V1.15
Update to V1.15 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedSINUMERIK ONE
Update to V6.25 SP1 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedSINUMERIK ONE V6.15
Update to V6.15 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan