Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40593

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.

Published

2025-07-08T11:15:29.473

Last Modified

2025-12-16T19:33:11.397

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System siemens simatic_cn_4100_firmware < 4.0 Yes
Hardware siemens simatic_cn_4100 - No
References