CVE-2025-40805 | THREATINT

Description

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

PUBLISHED Reserved 2025-04-16 | Published 2026-01-13 | Updated 2026-01-13 | Assigner siemens

CRITICAL: 10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CRITICAL: 10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Problem types

CWE-639: Authorization Bypass Through User-Controlled Key

Product status

Default status

unknown

Any version before V1.24.2

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before V1.24.2

affected

Default status

unknown

Any version before V1.25.1

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before V1.24.2

affected

Default status

unknown

Any version before V1.25.1

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before V1.24.2

affected

Default status

unknown

Any version before V1.24.2

affected

Default status

unknown

Any version before V2.2

affected

Default status

unknown

Any version before V2.2

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V1.25.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

References

cert-portal.siemens.com/productcert/html/ssa-014678.html

cert-portal.siemens.com/productcert/html/ssa-001536.html

cve.org (CVE-2025-40805)

nvd.nist.gov (CVE-2025-40805)

Download JSON