PT-2025-49846 · Siemens · Simatic Cn 4100

Published 2025-12-09 · Updated 2025-12-09 · CVE-2025-40941

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to 4.0.1

Description The SIMATIC CN 4100 device exposes server information in its responses. This could allow an attacker with network access to gain useful information, potentially increasing the likelihood of targeted attacks.

Recommendations Update to version 4.0.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-00144

CVE-2025-40941

Affected Products

Simatic Cn 4100

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-40941 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-416652.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00144 · Security Note
• https://osv.dev/vulnerability/CVE-2025-40941 · Vendor Advisory
• https://twitter.com/CVEnew/status/1998355313762955398 · Twitter Post