CVE-2025-40771criticalCWE-306

CVE-2025-40771: falha crítica em Siemens SIMATIC CP 1542SP-1

Publicada em

Seguir esta CVE+ Monitorar SIMATIC CP 1542SP-1 IRC+ Monitorar SIMATIC CP 1543SP-1

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.5%
A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.4.24). Affected devices do not properly authenticate configuration connections. This could allow an unauthenticated remote attacker to access the configuration data.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Siemens · SIMATIC CP 1542SP-1Siemens · SIMATIC CP 1542SP-1 IRCSiemens · SIMATIC CP 1543SP-1Siemens · SIPLUS ET 200SP CP 1542SP-1 IRC TX RAILSiemens · SIPLUS ET 200SP CP 1543SP-1 ISECSiemens · SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL
CVEs relacionadas — Siemens SIMATIC CP 1542SP-1

No mesmo produto, das mais perigosas para as menos.

CVE-2022-34821HIGHCVE-2022-34821EPSS 2.4%CVE-2022-34820HIGHCVE-2022-34820EPSS 2.2%CVE-2022-34819CRITICALCVE-2022-34819EPSS 2.1%CVE-2023-38380HIGHCVE-2023-38380EPSS 1.0%CVE-2022-43768HIGHCVE-2022-43768EPSS 1.0%CVE-2022-43716HIGHCVE-2022-43716EPSS 1.0%