VULNERABILITY INTELLIGENCE
CVE-2025-24009
CVSS score5.9 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2025-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not require authentication to access critical resources. An attacker with network access could retrieve sensitive information from certain data records, including obfuscated safety passwords.
Weakness classification
- productcert@siemens.com: CWE-732