EXPOSURES › CVE-2025-40938

CVE-2025-40938

HIGH

DETAIL

SourceNVD · cve Published2025-12-09 CVSS8.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-40938 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

Siemens · vendor simatic cn 4100 · product simatic cn 4100 firmware · product

DESCRIPTION

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive information in the firmware. This could allow an attacker to access and misuse this information, potentially impacting the device’s confidentiality, integrity, and availability.

AFFECTED FEDRAMP PRODUCTS · 1

PRODUCT	PROVIDER	STATUS	MATCH
Mendix Cloud for Government Siemens Government Technologies	Siemens Government Technologies	In Process	vendor-exact · 0.90