CVE-2025-40938

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - productcert@siemens.com

Published

2025-12-09

Last modified

2026-10-23

Weaknesses

CWE-798

Affected products

• Simatic Cn 4100 (Siemens)
• Simatic Cn 4100 Firmware (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-416652.html