Siemens SIMATIC Virtualization as a Service (SIVaaS)
Advisory ansehen veröffentlicht 2025-09-09
SIMATIC Virtualization as a Service (SIVaaS) is affected by a vulnerability which exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization. Siemens recommends to contact technical support to fix the vulnerability.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40804US | — | — | ||
A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without any authentication. Thi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-534283: Insecure File Share Vulnerability in SIMATIC Virtualization as a Service (SIVaaS) - CSAF Versionself
- SSA-534283: Insecure File Share Vulnerability in SIMATIC Virtualization as a Service (SIVaaS) - HTML Versionself
- ICS Advisory ICSA-25-254-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-254-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenSIMATIC Virtualization as a Service (SIVaaS)
Contact Technical Support for assistance
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan