CVE-2025-24009highCWE-732

CVE-2025-24009: fallo de gravedad alta en Siemens SIRIUS 3RK3 Modular Safety System (MSS)

Publicada el

Seguir esta CVE+ Monitorear SIRIUS 3RK3 Modular Safety System+ Monitorear SIRIUS Safety Relays 3SK2

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.2epss 0.4%
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not require authentication to access critical resources. An attacker with network access could retrieve sensitive information from certain data records, including obfuscated safety passwords.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Siemens · SIRIUS 3RK3 Modular Safety System (MSS)Siemens · SIRIUS Safety Relays 3SK2
CVEs relacionadas — Siemens SIRIUS 3RK3 Modular Safety System (MSS)

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-24007HIGHCVE-2025-24007EPSS 0.3%CVE-2025-24008HIGHCVE-2025-24008EPSS 0.3%