CVE-2025-40594
Summary
| CVE | CVE-2025-40594 |
|---|---|
| State | PUBLISHED |
| Assigner | siemens |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-09-09 09:15:36 UTC |
| Updated | 2026-06-17 09:21:48 UTC |
| Description | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges. |
Risk And Classification
Primary CVSS: v4.0 6.9 MEDIUM from [email protected]
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS: 0.002090000 probability, percentile 0.102700000 (date 2026-10-18)
Problem Types: CWE-269 | NVD-CWE-noinfo | CWE-269 CWE-269: Improper Privilege Management
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | [email protected] | Secondary | 6.9 | MEDIUM | CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/C... |
| 4.0 | CNA | DECLARED | 6.9 | MEDIUM | CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L |
| 3.1 | [email protected] | Primary | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | [email protected] | Secondary | 6.3 | MEDIUM | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L |
| 3.1 | CNA | DECLARED | 6.3 | MEDIUM | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L |
CVSS v4.0 Breakdown
Attack Vector
LocalAttack Complexity
HighAttack Requirements
PresentPrivileges Required
NoneUser Interaction
ActiveConfidentiality
NoneIntegrity
HighAvailability
LowSub Conf.
NoneSub Integrity
HighSub Availability
LowCVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Siemens | Sinamics G220 | - | - | All | All |
| Operating System | Siemens | Sinamics G220 Firmware | 6.4 | - | All | All |
| Operating System | Siemens | Sinamics G220 Firmware | 6.4 | hf1 | All | All |
| Hardware | Siemens | Sinamics S200 | - | All | All | All |
| Operating System | Siemens | Sinamics S200 Firmware | 6.4 | All | All | All |
| Hardware | Siemens | Sinamics S210 | - | - | All | All |
| Operating System | Siemens | Sinamics S210 Firmware | 6.4 | - | All | All |
| Operating System | Siemens | Sinamics S210 Firmware | 6.4 | hf1 | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Siemens | SINAMICS G220 V6.4 | affected V6.4 HF2 custom | Not specified |
| CNA | Siemens | SINAMICS S200 V6.4 | affected V6.4 HF7 custom | Not specified |
| CNA | Siemens | SINAMICS S210 V6.4 | affected V6.4 HF2 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| cert-portal.siemens.com/productcert/html/ssa-027652.html | [email protected] | cert-portal.siemens.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.