Beveiligingsadvies

CVE-2025-40937

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-09 10:44:35

Laatst bijgewerkt 2025-12-09 15:33:38

Toegewezen door siemens

CVSS-score 8.7

Status PUBLISHED

Beschrijving

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗