SSA-177847

csafDEsiemens_psirt

SSA-177847: Improper VNC Password Check Vulnerability in SINUMERIK Controllers

Advisory ansehen veröffentlicht 2025-08-12

Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40743US—OT erhöht—
A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (14)

  • MitigationSINUMERIK 828D PPU.4

    Apply Defense-in-Depth

  • MitigationSINUMERIK 828D PPU.5

    Apply Defense-in-Depth

  • MitigationSINUMERIK 840D sl

    Apply Defense-in-Depth

  • MitigationSINUMERIK MC

    Apply Defense-in-Depth

  • MitigationSINUMERIK MC V1.15

    Apply Defense-in-Depth

  • MitigationSINUMERIK ONE

    Apply Defense-in-Depth

  • MitigationSINUMERIK ONE V6.15

    Apply Defense-in-Depth

  • BehobenSINUMERIK 828D PPU.4

    Update to V4.95 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenSINUMERIK 828D PPU.5

    Update to V5.25 SP1 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenSINUMERIK 840D sl

    Update to V4.95 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenSINUMERIK MC

    Update to V1.25 SP1 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenSINUMERIK MC V1.15

    Update to V1.15 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenSINUMERIK ONE

    Update to V6.25 SP1 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenSINUMERIK ONE V6.15

    Update to V6.15 SP5 or later version Updated software version can be obtained from Siemens customer support or a local partner.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan