A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits inconsistent SNMP behavior, such as unexpected service availability and unreliable configuration handling across protocol versions. This could allow an attacker to access sensitive data, potentially leading to a breach of confidentiality.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-416652.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 Oct 2026, 22:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Una vulnerabilidad ha sido identificada en SIMATIC CN 4100 (todas las versiones anteriores a V4.0.1). La aplicación afectada presenta un comportamiento SNMP inconsistente, como disponibilidad de servicio inesperada y manejo de configuración poco fiable entre versiones de protocolo. Esto podría permitir a un atacante acceder a datos sensibles, lo que podría resultar en una violación de la confidencialidad. |
07 Oct 2026, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-12-09 16:17
Updated : 2026-10-23 22:10
NVD link : CVE-2025-40940
Mitre link : CVE-2025-40940
CVE.ORG link : CVE-2025-40940
JSON object : View
Products Affected
siemens
- simatic_cn_4100_firmware
- simatic_cn_4100
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor