← Back to browse · API

CVE-2025-40805

Severity
CRITICAL
CVSS
10.0
EPSS
0.00611
Risk score
40.21
CISA KEV
No
PoC
No
Published
2026-01-13
Modified
2026-05-12
First seen
2026-08-06
Aliases
CNVD-2026-23470, EUVD-2026-2362, GHSA-8GQP-3RHH-936H
Products
Siemens Industrial Edge Cloud Device (IECD) <V1.24.2, Siemens Industrial Edge Own Device (IEOD) <V1.24.2, Siemens Industrial Edge Virtual Device (IEVD) <V1.24.2, Siemens SCALANCE LPE9413 (6GK5998-3GS01-2AC2) <V2.2, Siemens SCALANCE LPE9433 (6GK5998-3GS11-2AC2) <V2.2, Siemens SIMATIC Automation Workstation family, Siemens SIMATIC HMI Unified Comfort Panels Hygienic family, Siemens SIMATIC HMI Unified Comfort Panels Standard family, Siemens SIMATIC IOT2050 (6ES7647-0BA00-1YA2) <V1.25.1, Siemens SIMATIC IPC BX-39A Industrial Edge Device <V3.1, Siemens SIMATIC IPC BX-59A Industrial Edge Device <V3.1, Siemens SIMATIC IPC127E Industrial Edge Device <V3.1, Siemens SIMATIC IPC227E Industrial Edge Device <V3.1, Siemens SIMATIC IPC227G Industrial Edge Device <V3.1, Siemens SIMATIC IPC847E Industrial Edge Device <V3.1, Siemens:Industrial Edge Cloud Device (IECD) 0 <V1.24.2, Siemens:Industrial Edge Device Kit - arm64 V1.12 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.16 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.19 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.21 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.23 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.24 0 <V1.24.2, Siemens:Industrial Edge Device Kit - arm64 V1.5 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.6 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.8 0 <*, Siemens:Industrial Edge Device Kit - arm64 V1.9 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.11 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.15 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.16 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.17 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.19 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.22 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.5 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.6 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.7 0 <*, Siemens:Industrial Edge Device Kit - x86-64 V1.9 0 <*, Siemens:Industrial Edge Own Device (IEOD) 0 <V1.24.2, Siemens:Industrial Edge Virtual Device (IEVD) 0 <V1.24.2, Siemens:SIMATIC Automation Workstation 24" 0 <V1.3, Siemens:SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design 0 <V21, Siemens:SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) 0 <V21, Siemens:SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit 0 <V21, Siemens:SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio 0 <V21, Siemens:SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) 0 <V21, Siemens:SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design 0 <V21, Siemens:SIMATIC HMI MTP1200 Unified Comfort Panel neutral design 0 <V21, Siemens:SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) 0 <V21, Siemens:SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio 0 <V21, Siemens:SIMATIC HMI MTP1500 Unified Comfort Panel 0 <V21, Siemens:SIMATIC HMI MTP1500 Unified Comfort Panel hygienic 0 <V21, Siemens:SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design 0 <V21, Siemens:SIMATIC HMI MTP1500 Unified Comfort Panel neutral design 0 <V21, Siemens:SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) 0 <V21, Siemens:SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit 0 <V21, Siemens:SIMATIC HMI MTP1900 Unified Comfort Panel 0 <V21, Siemens:SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design 0 <V21, Siemens:SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) 0 <V21, Siemens:SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) 0 <V21, Siemens:SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design 0 <V21, Siemens:SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design 0 <V21, Siemens:SIMATIC HMI MTP700 Unified Comfort Panel 0 <V21, Siemens:SIMATIC IPC BX-59A Industrial Edge Device 0 <V3.1, Siemens:SIMATIC IPC127E Industrial Edge Device 0 <V3.1, Siemens:SIMATIC IPC427E Industrial Edge Device 0 <V3.1, Siemens:SIPLUS HMI MTP1000 Unified Comfort 0 <V21
Sources
cnvd CNVD-2026-23470
euvd EUVD-2026-2362

Description

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

References