High SSA-416652 5 CVEs

SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1

Published Dec 9, 2025 · Updated Dec 9, 2025

Vendor: Siemens Product: SIMATIC CN 4100

Summary

SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality.

Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.

Vulnerabilities 5

High 8.3

CVE-2025-40937

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properl…

Siemens SIMATIC CN 4100 ICS / OT

Dec 9, 2025
High 8.1

CVE-2025-40938

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive in…

Siemens SIMATIC CN 4100 ICS / OT

Dec 9, 2025
Medium 4.9

CVE-2025-40940

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits incon…

Siemens SIMATIC CN 4100 ICS / OT

Dec 9, 2025
Medium 4.6

CVE-2025-40939

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port…

Siemens SIMATIC CN 4100 ICS / OT

Dec 9, 2025
Medium 4.3

CVE-2025-40941

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server inf…

Siemens SIMATIC CN 4100 ICS / OT

Dec 9, 2025

Revision history

2025-12-09 #1
Publication Date

References

SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-416652.html