CVE-2025-40593
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.
- Score
- CVSS 4.0 7.1 High
- Status
- Analyzed - productcert@siemens.com
- Published
- 2025-07-08
- Last modified
- 2025-07-08
- Weaknesses
- CWE-20
Affected products
References
- https://cert-portal.siemens.com/productcert/html/ssa-626991.html
