SSA-534283

csafDEsiemens_psirt

SSA-534283: Insecure File Share Vulnerability in SIMATIC Virtualization as a Service (SIVaaS)

Advisory ansehen veröffentlicht 2025-09-09

SIMATIC Virtualization as a Service (SIVaaS) is affected by a vulnerability which exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization. Siemens recommends to contact technical support to fix the vulnerability.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40804US——
A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without any authentication. Thi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (1)

  • BehobenSIMATIC Virtualization as a Service (SIVaaS)

    Contact Technical Support for assistance

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan