CVE-2026-41125

mediumpriority · track · 0EPSS 0.002 · 5 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.15% (5th) EPSS

CVSS 6 · medium

Is it mine?

185 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedblueplanet 105 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 110 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 125 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 137 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 150 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 155 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 165 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 87.0 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet 92.0 TL3siemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet gridsave 110 TL3-Ssiemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet gridsave 137 TL3-Ssiemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
Fixedblueplanet gridsave 92.0 TL3-Ssiemens_psirt
Update to V3.92 or later version
https://kaco-newenergy.com/service/mykacocom-customer-portal
No fix availableblueplanet 100 NX3 M8siemens_psirt
Currently no fix is available
No fix availableblueplanet 100 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 105 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 125 NX3 M10siemens_psirt
Currently no fix is available
No fix availableblueplanet 125 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 150 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 155 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 165 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 87.0 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 92.0 TL3 GEN2siemens_psirt
Currently no fix is available
No fix availableblueplanet 100 NX3 M8cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 100 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 105 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 105 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 110 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 125 NX3 M11cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 125 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 125 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 137 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 150 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 150 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 155 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 155 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 165 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 165 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 87.0 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 87.0 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 92.0 TL3cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet 92.0 TL3 GEN2cisa_csaf_ot
Currently no fix is available
No fix availableblueplanet gridsafe 110 TL3-Scisa_csaf_ot
Currently no fix is available
No fix availableblueplanet gridsafe 137 TL3-Scisa_csaf_ot
Currently no fix is available
No fix availableblueplanet gridsafe 92.0 TL3-Scisa_csaf_ot
Currently no fix is available

cvss

Technical severity, 0–10. One row per scoring source.

6.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2–6

v3.16mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:Hsecondary · NCSC-NL NL

v3.16mediumAV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 0.5 · impact 5.5

v3.16mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.16mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:Hsecondary · CISA US

v4.05.9mediumCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.9mediumCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.02lowCVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-89USCWE-89USCWE-89USCWE-89USCWE-89US

affected products (185)

Products and version ranges known to be affected.

blueplanet 100 NX3 M8all versionscisa_csaf_otUS
blueplanet 100 TL3 GEN2all versionscisa_csaf_otUS
blueplanet 105 TL3all versionscisa_csaf_otUS
blueplanet 105 TL3 GEN2all versionscisa_csaf_otUS
blueplanet 110 TL3all versionscisa_csaf_otUS
blueplanet 125 NX3 M11all versionscisa_csaf_otUS
blueplanet 125 TL3all versionscisa_csaf_otUS
blueplanet 125 TL3 GEN2all versionscisa_csaf_otUS
blueplanet 137 TL3all versionscisa_csaf_otUS
blueplanet 150 TL3all versionscisa_csaf_otUS
blueplanet 150 TL3 GEN2all versionscisa_csaf_otUS
blueplanet 155 TL3all versionscisa_csaf_otUS
blueplanet 155 TL3 GEN2all versionscisa_csaf_otUS
blueplanet 165 TL3all versionscisa_csaf_otUS
blueplanet 165 TL3 GEN2all versionscisa_csaf_otUS
blueplanet 25.0 NX3-33.0 NX3all versionsnot affectedcisa_csaf_otUS
blueplanet 3.0 NX3-20.0 NX3all versionsnot affectedcisa_csaf_otUS
blueplanet 3.0-5.0 NX1all versionsnot affectedcisa_csaf_otUS
blueplanet 360 NX3 M6all versionsnot affectedcisa_csaf_otUS
blueplanet 50.0 NX3-60.0 NX3all versionsnot affectedcisa_csaf_otUS

showing 20 of 185

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0147Kwetsbaarheden verholpen in Siemens-productenNL2026-05-13csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in verschillende (OT-)producten. Het gaat onder andere om producten in de Siemens RUGGEDCOM-, SCALANCE-, SIMATIC-, SIMIT-, SINAMICS-, SIPROTEC-, SENTRON- en Solid Edge-productreeksen.
SSA-545643SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters2026-05-12csaf · siemens_psirtDE
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected products and recommends to update to the latest versions. KACO new energy GmbH is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
ICSA-26-160-02Siemens KACO Blueplanet Inverters2026-05-12icsa · cisa_csaf_otUS
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected products and recommends to update to the latest versions. KACO new energy GmbH is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2026-05-12modified 2026-10-13

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan