CVE-2025-40584: falha de média gravidade em Siemens SIMOTION SCOUT TIA V5.4
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.2%
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Siemens · SIMOTION SCOUT TIA V5.4Siemens · SIMOTION SCOUT TIA V5.5Siemens · SIMOTION SCOUT TIA V5.6Siemens · SIMOTION SCOUT TIA V5.7Siemens · SIMOTION SCOUT V5.4Siemens · SIMOTION SCOUT V5.5Siemens · SIMOTION SCOUT V5.6Siemens · SIMOTION SCOUT V5.7Siemens · SINAMICS STARTER V5.5Siemens · SINAMICS STARTER V5.6Siemens · SINAMICS STARTER V5.7CVEs relacionadas — Siemens SIMOTION SCOUT TIA V5.4
No mesmo produto, das mais perigosas para as menos.