CVE-2025-40941

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.

Score

CVSS 4.0 5.3 Medium

Status

Analyzed - productcert@siemens.com

Published

2025-12-09

Last modified

2026-10-23

Weaknesses

CWE-200

Affected products

• Simatic Cn 4100 (Siemens)
• Simatic Cn 4100 Firmware (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-416652.html