{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Industrial Edge Devices, SCALANCE, SIMATIC, SIPLUS en Telecontrol Server.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- (Remote) code execution (root/admin rechten)\n- Toegang tot systeemgegevens\n- Verhogen van rechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.", "title": "Interpretaties" }, { "category": "description", "text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "title": "CWE-22" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "general", "text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", "title": "CWE-80" }, { "category": "general", "text": "Execution with Unnecessary Privileges", "title": "CWE-250" }, { "category": "general", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "general", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-001536.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-014678.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-192617.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-674753.html" }, { "category": "external", "summary": "Reference", "url": "https://cert-portal.siemens.com/productcert/html/ssa-827968.html" } ], "title": "Kwetsbaarheden verholpen in Siemens producten", "tracking": { "current_release_date": "2026-01-13T12:05:57.353070Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2026-0005", "initial_release_date": "2026-01-13T12:05:57.353070Z", "revision_history": [ { "date": "2026-01-13T12:05:57.353070Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "Industrial Edge Cloud Device (IECD)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-2" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.10" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-3" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.11" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-4" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.12" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-5" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.13" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-6" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.14" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-7" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.15" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-8" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.16" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-9" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.17" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-10" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.18" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-11" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.19" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-12" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.20" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-13" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.21" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-14" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.22" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-15" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.23" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-16" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.24" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-17" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.25" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-18" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.5" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-19" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.6" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-20" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.7" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-21" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.8" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-22" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - arm64 V1.9" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-23" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.10" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-24" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.11" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-25" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.12" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-26" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.13" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-27" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.14" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-28" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.15" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-29" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.16" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-30" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.17" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-31" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.18" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-32" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.19" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-33" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.20" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-34" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.21" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-35" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.22" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-36" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.23" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-37" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.24" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-38" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.25" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-39" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.5" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-40" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.6" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-41" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.7" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-42" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.8" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-43" } } ], "category": "product_name", "name": "Industrial Edge Device Kit - x86-64 V1.9" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-44" } } ], "category": "product_name", "name": "Industrial Edge Own Device (IEOD)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-45" } } ], "category": "product_name", "name": "Industrial Edge Virtual Device (IEVD)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-46" } } ], "category": "product_name", "name": "SCALANCE LPE9413" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-47" } } ], "category": "product_name", "name": "SCALANCE LPE9433" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-48" } } ], "category": "product_name", "name": "SIMATIC Automation Workstation 19\"" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-49" } } ], "category": "product_name", "name": "SIMATIC Automation Workstation 24\"" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-50" } } ], "category": "product_name", "name": "SIMATIC ET 200AL IM 157-1 PN" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-51" } } ], "category": "product_name", "name": "SIMATIC ET 200MP IM 155-5 PN HF" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-52" } } ], "category": "product_name", "name": "SIMATIC ET 200SP IM 155-6 MF HF" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-53" } } ], "category": "product_name", "name": "SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-54" } } ], "category": "product_name", "name": "SIMATIC ET 200SP IM 155-6 PN R1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-55" } } ], "category": "product_name", "name": "SIMATIC ET 200SP IM 155-6 PN/2 HF" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-56" } } ], "category": "product_name", "name": "SIMATIC ET 200SP IM 155-6 PN/3 HF" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-57" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1000 Unified Comfort Panel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-58" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1000 Unified Comfort Panel hygienic" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-59" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-60" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1000, Unified Comfort Panel neutral" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-61" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-62" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-63" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-64" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-65" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-66" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-67" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Unified Comfort Panel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-68" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Unified Comfort Panel hygienic" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-69" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-70" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1200 Unified Comfort Panel neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-71" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-72" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-73" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-74" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-75" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-76" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-77" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Unified Comfort Panel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-78" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Unified Comfort Panel hygienic" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-79" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-80" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1500 Unified Comfort Panel neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-81" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-82" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-83" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-84" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-85" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-86" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-87" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Unified Comfort Panel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-88" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Unified Comfort Panel hygienic" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-89" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-90" } } ], "category": "product_name", "name": "SIMATIC HMI MTP1900 Unified Comfort Panel neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-91" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-92" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-93" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-94" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-95" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-96" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-97" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Unified Comfort Hygienic" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-98" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-99" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Unified Comfort Panel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-100" } } ], "category": "product_name", "name": "SIMATIC HMI MTP2200 Unified Comfort Panel neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-101" } } ], "category": "product_name", "name": "SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-102" } } ], "category": "product_name", "name": "SIMATIC HMI MTP700, Unified Comfort Panel neutral design" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-103" } } ], "category": "product_name", "name": "SIMATIC HMI MTP700 Unified Comfort Panel" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-104" } } ], "category": "product_name", "name": "SIMATIC IOT2050" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-105" } } ], "category": "product_name", "name": "SIMATIC IPC BX-39A Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-106" } } ], "category": "product_name", "name": "SIMATIC IPC BX-59A Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-107" } } ], "category": "product_name", "name": "SIMATIC IPC127E Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-108" } } ], "category": "product_name", "name": "SIMATIC IPC227E Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-109" } } ], "category": "product_name", "name": "SIMATIC IPC227G Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-110" } } ], "category": "product_name", "name": "SIMATIC IPC427E Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-111" } } ], "category": "product_name", "name": "SIMATIC IPC847E Industrial Edge Device" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-112" } } ], "category": "product_name", "name": "SIMATIC PN/MF Coupler" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-113" } } ], "category": "product_name", "name": "SIMATIC PN/PN Coupler" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-114" } } ], "category": "product_name", "name": "SIPLUS ET 200MP IM 155-5 PN HF" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-115" } } ], "category": "product_name", "name": "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-116" } } ], "category": "product_name", "name": "SIPLUS ET 200SP IM 155-6 PN HF" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-117" } } ], "category": "product_name", "name": "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-118" } } ], "category": "product_name", "name": "SIPLUS ET 200SP IM 155-6 PN HF TX RAIL" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-119" } } ], "category": "product_name", "name": "SIPLUS HMI MTP1000 Unified Comfort" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-120" } } ], "category": "product_name", "name": "SIPLUS HMI MTP1200 Unified Comfort" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-121" } } ], "category": "product_name", "name": "SIPLUS HMI MTP700 Unified Comfort" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-122" } } ], "category": "product_name", "name": "SIPLUS NET PN/PN Coupler" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-123" } } ], "category": "product_name", "name": "TeleControl Server Basic" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-40805", "cwe": { "id": "CWE-639", "name": "Authorization Bypass Through User-Controlled Key" }, "notes": [ { "category": "other", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" }, { "category": "description", "text": "A vulnerability in certain devices allows unauthenticated remote attackers to bypass user authentication on specific API endpoints, potentially impersonating legitimate users if they know the user's identity.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40805 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40805.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10.0, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40805" }, { "cve": "CVE-2025-40891", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "description", "text": "A Stored HTML Injection vulnerability in the Time Machine Snapshot Diff feature allows unauthenticated attackers to inject HTML tags, potentially leading to phishing and open redirect attacks, though full exploitation is complex due to mitigations.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40891 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40891.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40891" }, { "cve": "CVE-2025-40892", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "description", "text": "A Stored Cross-Site Scripting vulnerability in the Reports functionality allows authenticated users to create malicious reports that execute JavaScript in victims' browsers, leading to unauthorized actions and data exposure.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40892 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40892.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H", "baseScore": 8.9, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40892" }, { "cve": "CVE-2025-40893", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" }, { "category": "description", "text": "A Stored HTML Injection vulnerability in the Asset List functionality allows unauthenticated attackers to inject HTML tags into asset attributes, posing a risk for phishing attacks.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40893 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40893.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40893" }, { "cve": "CVE-2025-40898", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "other", "text": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "title": "CWE-22" }, { "category": "description", "text": "A path traversal vulnerability in the Import Arc data archive functionality allows limited-privileged authenticated users to upload malicious files, potentially compromising device configuration and availability.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40898 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40898.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40898" }, { "cve": "CVE-2025-40942", "cwe": { "id": "CWE-250", "name": "Execution with Unnecessary Privileges" }, "notes": [ { "category": "other", "text": "Execution with Unnecessary Privileges", "title": "CWE-250" }, { "category": "description", "text": "A local privilege escalation vulnerability exists in all versions of TeleControl Server Basic prior to V3.1.2.4, enabling attackers to execute arbitrary code with elevated privileges.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40942 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40942.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40942" }, { "cve": "CVE-2025-40944", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "other", "text": "Uncontrolled Resource Consumption", "title": "CWE-400" }, { "category": "description", "text": "A vulnerability in SIMATIC ET 200 and SIPLUS devices can lead to denial-of-service due to improper handling of S7 protocol session disconnect requests, necessitating a power cycle for recovery.", "title": "Summary" }, { "category": "general", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] }, "references": [ { "category": "self", "summary": "CVE-2025-40944 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-40944.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2", "CSAFPID-3", "CSAFPID-4", "CSAFPID-5", "CSAFPID-6", "CSAFPID-7", "CSAFPID-8", "CSAFPID-9", "CSAFPID-10", "CSAFPID-11", "CSAFPID-12", "CSAFPID-13", "CSAFPID-14", "CSAFPID-15", "CSAFPID-16", "CSAFPID-17", "CSAFPID-18", "CSAFPID-19", "CSAFPID-20", "CSAFPID-21", "CSAFPID-22", "CSAFPID-23", "CSAFPID-24", "CSAFPID-25", "CSAFPID-26", "CSAFPID-27", "CSAFPID-28", "CSAFPID-29", "CSAFPID-30", "CSAFPID-31", "CSAFPID-32", "CSAFPID-33", "CSAFPID-34", "CSAFPID-35", "CSAFPID-36", "CSAFPID-37", "CSAFPID-38", "CSAFPID-39", "CSAFPID-40", "CSAFPID-41", "CSAFPID-42", "CSAFPID-43", "CSAFPID-44", "CSAFPID-45", "CSAFPID-46", "CSAFPID-47", "CSAFPID-48", "CSAFPID-49", "CSAFPID-50", "CSAFPID-51", "CSAFPID-52", "CSAFPID-53", "CSAFPID-54", "CSAFPID-55", "CSAFPID-56", "CSAFPID-57", "CSAFPID-58", "CSAFPID-59", "CSAFPID-60", "CSAFPID-61", "CSAFPID-62", "CSAFPID-63", "CSAFPID-64", "CSAFPID-65", "CSAFPID-66", "CSAFPID-67", "CSAFPID-68", "CSAFPID-69", "CSAFPID-70", "CSAFPID-71", "CSAFPID-72", "CSAFPID-73", "CSAFPID-74", "CSAFPID-75", "CSAFPID-76", "CSAFPID-77", "CSAFPID-78", "CSAFPID-79", "CSAFPID-80", "CSAFPID-81", "CSAFPID-82", "CSAFPID-83", "CSAFPID-84", "CSAFPID-85", "CSAFPID-86", "CSAFPID-87", "CSAFPID-88", "CSAFPID-89", "CSAFPID-90", "CSAFPID-91", "CSAFPID-92", "CSAFPID-93", "CSAFPID-94", "CSAFPID-95", "CSAFPID-96", "CSAFPID-97", "CSAFPID-98", "CSAFPID-99", "CSAFPID-100", "CSAFPID-101", "CSAFPID-102", "CSAFPID-103", "CSAFPID-104", "CSAFPID-105", "CSAFPID-106", "CSAFPID-107", "CSAFPID-108", "CSAFPID-109", "CSAFPID-110", "CSAFPID-111", "CSAFPID-112", "CSAFPID-113", "CSAFPID-114", "CSAFPID-115", "CSAFPID-116", "CSAFPID-117", "CSAFPID-118", "CSAFPID-119", "CSAFPID-120", "CSAFPID-121", "CSAFPID-122", "CSAFPID-123" ] } ], "title": "CVE-2025-40944" } ] }