VULNERABILITY INTELLIGENCE

CVE-2025-40940

CVSS score4.9 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.

Weakness classification

  • productcert@siemens.com: CWE-200

Primary references