جزئیات آسیب‌پذیری
CVE-2025-40805
Siemens Industrial Edge Cloud DeviceSiemens Industrial Edge Device Kit - arm64Siemens Industrial Edge Device Kit - x86-64Siemens Industrial Edge Own DeviceSiemens Industrial Edge Virtual DeviceSiemens SCALANCE LPE9413
CVSS 4.0
10.0بحرانی
شرح رسمی (انگلیسی)
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 10.0بحرانی | 4.0 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
| 10.0بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Siemens | Industrial Edge Cloud Device (IECD) | v < V1.24.2 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.10 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.11 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.12 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.13 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.14 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.15 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.16 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.21 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.22 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.23 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.24 | v < V1.24.2 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.25 | v < V1.25.1 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.5 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.7 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.8 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.9 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.10 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.11 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.12 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.13 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.14 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.15 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.16 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.21 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.22 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.23 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.24 | v < V1.24.2 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.25 | v < V1.25.1 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.5 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.7 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.8 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.9 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Own Device (IEOD) | v < V1.24.2 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Virtual Device (IEVD) | v < V1.24.2 | CVEProject cvelistV5 (CNA) |
| Siemens | SCALANCE LPE9413 | v < V2.2 | CVEProject cvelistV5 (CNA) |
| Siemens | SCALANCE LPE9433 | v < V2.2 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Automation Workstation 19" | v < V1.3 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC Automation Workstation 24" | v < V1.3 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000, Unified Comfort Panel neutral | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Hygienic | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Panel | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Panel neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700, Unified Comfort Panel neutral design | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IOT2050 | v < V1.25.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC BX-39A Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC BX-59A Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC127E Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC227E Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC227G Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC427E Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC IPC847E Industrial Edge Device | v < V3.1 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS HMI MTP1000 Unified Comfort | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS HMI MTP1200 Unified Comfort | v < V21 | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS HMI MTP700 Unified Comfort | v < V21 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۰/۲۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۲/۲۲
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- siemens
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۵٪
احتمال بهره‌برداری در ۳۰ روز
۵۱٫۵٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-639Authorization Bypass Through User-Controlled Key