CVE-2025-40940mediumCWE-200

CVE-2025-40940: medium-severity vulnerability in Siemens SIMATIC CN 4100

Published

Follow this CVE+ Monitor SIMATIC CN

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Siemens · SIMATIC CN 4100
Related CVEs — Siemens SIMATIC CN 4100

In the same product, most dangerous first.

CVE-2024-32740CRITICALCVE-2024-32740EPSS 0.7%CVE-2024-32741CRITICALCVE-2024-32741EPSS 0.6%CVE-2023-49621CRITICALCVE-2023-49621EPSS 0.6%CVE-2025-40937HIGHCVE-2025-40937EPSS 0.6%CVE-2023-49252HIGHCVE-2023-49252EPSS 0.6%CVE-2023-29130CRITICALCVE-2023-29130EPSS 0.6%