SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1
Advisory ansehen veröffentlicht 2025-12-09
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
01
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40941US | medium4.3 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses.
This could allow an attacker with… | ||||
| CVE-2025-40940US | — | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availabilit… | ||||
| CVE-2025-40939US | — | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow a… | ||||
| CVE-2025-40938US | critical9.8OT erhöht | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to ac… | ||||
| CVE-2025-40937US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in imp… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (5)
- BehobenSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - BehobenSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - BehobenSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - BehobenSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/ - BehobenSIMATIC CN 4100
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814144/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan