Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-40593 EUVD-2025-20435GHSA-vm7p-h5v8-4m2j

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by stor…

Published Jul 8, 2025 · Updated Jul 8, 2025 · Assigned by siemens

Description

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0). The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition.

Affected products

VendorProductAffectedFixed
Siemens SIMATIC CN 4100 < V4.0 V4.0

Advisories 3

References