PT-2025-49845 · Siemens · Simatic Cn 4100

Published 2025-12-09 · Updated 2025-12-09 · CVE-2025-40940

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to 4.0.1

Description The application demonstrates inconsistent Simple Network Management Protocol (SNMP) behavior, including unexpected service availability and unreliable configuration handling across different protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.

Recommendations Update to version 4.0.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-00143

CVE-2025-40940

Affected Products

Simatic Cn 4100

References · 5

• https://bdu.fstec.ru/vul/2026-00143 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-416652.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-40940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40940 · Security Note
• https://twitter.com/CVEnew/status/1998355315130261616 · Twitter Post