CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - productcert@siemens.com

Published

2025-09-09

Last modified

2025-09-09

Weaknesses

CWE-732

Affected products

• Simatic Virtualization As A Service Sivaas (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-534283.html