Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Siemens SIMATIC CN 4100

CVE-2025-40940
MEDIUM 6.9

At a glance

Source
NVD
EPSS
EPSS 0.37 % · percentile 30 ()
State
PUBLISHED
Published
Updated
Assigner
siemens
NVD status
Analyzed

Search on…

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.

Weaknesses (CWE)

  • CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Nsiemens
CVSS 4.0MEDIUM 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nsiemens
CVSS 4.0MEDIUM 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · productcert@siemens.com (Secondary)
CVSS 3.1MEDIUM 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NNVD · productcert@siemens.com (Secondary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Siemens · SIMATIC CN 4100affected 0 < V4.0.1

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD