Vulnerability-Lookup

CNVD-2026-24198

Vulnerability from cnvd - Published: 2026-06-17

Title

多款Siemens产品资源管理错误漏洞（CNVD-2026-24198）

Description

Siemens SIMATIC ET 200AL等都是德国西门子（Siemens）公司的产品。Siemens SIMATIC ET 200AL是一款分布式I/O系统模块。Siemens SIMATIC ET 200MP是一款用于高密度通道应用的控制柜的模块化I/O系统模块。Siemens SIMATIC ET 200SP是一款分布式I/O系统。多款Siemens产品存在资源管理错误漏洞，该漏洞源于S7协议会话断开请求处理不当，攻击者可利用该漏洞导致设备无响应和拒绝服务。

Severity

高

Patch Name

多款Siemens产品资源管理错误漏洞（CNVD-2026-24198）的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://cert-portal.siemens.com/productcert/html/ssa-674753.html

Reference

https://cert-portal.siemens.com/productcert/html/ssa-674753.html

Impacted products

Name
['Siemens SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)', 'Siemens SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) >=V4.2.0', 'Siemens SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0) >=V4.2.0', 'Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0) >=V4.2.0', 'Siemens SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)', 'Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) <V1.3', 'Siemens SIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0) <V6.0.1', 'Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF (incl. SIPLUS variants)', 'Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) <V4.2.2', 'Siemens SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)', 'Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)']

Name

['Siemens SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)', 'Siemens SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) >=V4.2.0', 'Siemens SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0) >=V4.2.0', 'Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0) >=V4.2.0', 'Siemens SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)', 'Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) <V1.3', 'Siemens SIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0) <V6.0.1', 'Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF (incl. SIPLUS variants)', 'Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) <V4.2.2', 'Siemens SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)', 'Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-40944",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-40944"
    }
  },
  "description": "Siemens SIMATIC ET 200AL\u7b49\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIMATIC ET 200AL\u662f\u4e00\u6b3e\u5206\u5e03\u5f0fI/O\u7cfb\u7edf\u6a21\u5757\u3002Siemens SIMATIC ET 200MP\u662f\u4e00\u6b3e\u7528\u4e8e\u9ad8\u5bc6\u5ea6\u901a\u9053\u5e94\u7528\u7684\u63a7\u5236\u67dc\u7684\u6a21\u5757\u5316I/O\u7cfb\u7edf\u6a21\u5757\u3002Siemens SIMATIC ET 200SP\u662f\u4e00\u6b3e\u5206\u5e03\u5f0fI/O\u7cfb\u7edf\u3002 \n\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eS7\u534f\u8bae\u4f1a\u8bdd\u65ad\u5f00\u8bf7\u6c42\u5904\u7406\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u8bbe\u5907\u65e0\u54cd\u5e94\u548c\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a \r\nhttps://cert-portal.siemens.com/productcert/html/ssa-674753.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-24198",
  "openTime": "2026-06-17",
  "patchDescription": "Siemens SIMATIC ET 200AL\u7b49\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Siemens SIMATIC ET 200AL\u662f\u4e00\u6b3e\u5206\u5e03\u5f0fI/O\u7cfb\u7edf\u6a21\u5757\u3002Siemens SIMATIC ET 200MP\u662f\u4e00\u6b3e\u7528\u4e8e\u9ad8\u5bc6\u5ea6\u901a\u9053\u5e94\u7528\u7684\u63a7\u5236\u67dc\u7684\u6a21\u5757\u5316I/O\u7cfb\u7edf\u6a21\u5757\u3002Siemens SIMATIC ET 200SP\u662f\u4e00\u6b3e\u5206\u5e03\u5f0fI/O\u7cfb\u7edf\u3002 \r\n\r\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eS7\u534f\u8bae\u4f1a\u8bdd\u65ad\u5f00\u8bf7\u6c42\u5904\u7406\u4e0d\u5f53\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u8bbe\u5907\u65e0\u54cd\u5e94\u548c\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eSiemens\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2026-24198\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0)",
      "Siemens SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) \u003e=V4.2.0",
      "Siemens SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0) \u003e=V4.2.0",
      "Siemens SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0) \u003e=V4.2.0",
      "Siemens SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0)",
      "Siemens SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) \u003cV1.3",
      "Siemens SIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0) \u003cV6.0.1",
      "Siemens SIMATIC ET 200SP IM 155-6 PN/2 HF (incl. SIPLUS variants)",
      "Siemens SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) \u003cV4.2.2",
      "Siemens SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0)",
      "Siemens SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-674753.html",
  "serverity": "\u9ad8",
  "submitTime": "2026-01-26",
  "title": "\u591a\u6b3eSiemens\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2026-24198\uff09"
}

CVE-2025-40944 (GCVE-0-2025-40944)

Vulnerability from cvelistv5 – Published: 2026-01-13 09:44 – Updated: 2026-06-09 08:46

Summary

A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) (All versions >= V4.2.0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0) (All versions), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) (All versions < V1.3), SIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0) (All versions < V6.0.1), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0) (All versions >= V4.2.0 < V4.2.5), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) (All versions < V4.2.2), SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0) (All versions), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0) (All versions < V6.0.0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0) (All versions >= V4.2.0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0) (All versions >= V4.2.0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0) (All versions >= V4.2.0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0) (All versions >= V4.2.0 < V4.2.5), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0) (All versions >= V4.2.0 < V4.2.5), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0) (All versions >= V4.2.0 < V4.2.5), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0) (All versions >= V4.2.0 < V4.2.5), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0) (All versions < V6.0.0). Affected devices do not properly handle S7 protocol session disconnect requests. When receiving a valid S7 protocol Disconnect Request (COTP DR TPDU) on TCP port 102, the devices enter an improper session state. This could allow an attacker to cause the device to become unresponsive, leading to a denial-of-service condition that requires a power cycle to restore normal operation.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-13 17:20 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

15 products

Vendor	Product	Version
Siemens	SIMATIC ET 200AL IM 157-1 PN	Affected: 0 , < * (custom)
Siemens	SIMATIC ET 200MP IM 155-5 PN HF	Affected: V4.2.0 , < * (custom)
Siemens	SIMATIC ET 200SP IM 155-6 MF HF	Affected: 0 , < * (custom)
Siemens	SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)	Affected: 0 , < V1.3 (custom)
Siemens	SIMATIC ET 200SP IM 155-6 PN R1	Affected: 0 , < V6.0.1 (custom)
Siemens	SIMATIC ET 200SP IM 155-6 PN/2 HF	Affected: V4.2.0 , < V4.2.5 (custom)
Siemens	SIMATIC ET 200SP IM 155-6 PN/3 HF	Affected: 0 , < V4.2.2 (custom)
Siemens	SIMATIC PN/MF Coupler	Affected: 0 , < * (custom)
Siemens	SIMATIC PN/PN Coupler	Affected: 0 , < V6.0.0 (custom)
Siemens	SIPLUS ET 200MP IM 155-5 PN HF	Affected: V4.2.0 , < * (custom)
Siemens	SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL	Affected: V4.2.0 , < * (custom)
Siemens	SIPLUS ET 200SP IM 155-6 PN HF	Affected: V4.2.0 , < V4.2.5 (custom)
Siemens	SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL	Affected: V4.2.0 , < V4.2.5 (custom)
Siemens	SIPLUS ET 200SP IM 155-6 PN HF TX RAIL	Affected: V4.2.0 , < V4.2.5 (custom)
Siemens	SIPLUS NET PN/PN Coupler	Affected: 0 , < V6.0.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-40944",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-13T17:20:16.564311Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-13T17:21:36.848Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200AL IM 157-1 PN",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200MP IM 155-5 PN HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP IM 155-6 MF HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP IM 155-6 PN R1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.0.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP IM 155-6 PN/2 HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.2.5",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC ET 200SP IM 155-6 PN/3 HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC PN/MF Coupler",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC PN/PN Coupler",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200MP IM 155-5 PN HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200MP IM 155-5 PN HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP IM 155-6 PN HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.2.5",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP IM 155-6 PN HF",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.2.5",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.2.5",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP IM 155-6 PN HF TX RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V4.2.5",
              "status": "affected",
              "version": "V4.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS NET PN/PN Coupler",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V6.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6ES7155-5AA00-0AC0) (All versions \u003e= V4.2.0), SIMATIC ET 200SP IM 155-6 MF HF (6ES7155-6MU00-0CN0) (All versions), SIMATIC ET 200SP IM 155-6 PN HA (incl. SIPLUS variants) (All versions \u003c V1.3), SIMATIC ET 200SP IM 155-6 PN R1 (6ES7155-6AU00-0HM0) (All versions \u003c V6.0.1), SIMATIC ET 200SP IM 155-6 PN/2 HF (6ES7155-6AU01-0CN0) (All versions \u003e= V4.2.0 \u003c V4.2.5), SIMATIC ET 200SP IM 155-6 PN/3 HF (6ES7155-6AU30-0CN0) (All versions \u003c V4.2.2), SIMATIC PN/MF Coupler (6ES7158-3MU10-0XA0) (All versions), SIMATIC PN/PN Coupler (6ES7158-3AD10-0XA0) (All versions \u003c V6.0.0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-2AC0) (All versions \u003e= V4.2.0), SIPLUS ET 200MP IM 155-5 PN HF (6AG1155-5AA00-7AC0) (All versions \u003e= V4.2.0), SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL (6AG2155-5AA00-1AC0) (All versions \u003e= V4.2.0), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-2CN0) (All versions \u003e= V4.2.0 \u003c V4.2.5), SIPLUS ET 200SP IM 155-6 PN HF (6AG1155-6AU01-7CN0) (All versions \u003e= V4.2.0 \u003c V4.2.5), SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL (6AG2155-6AU01-1CN0) (All versions \u003e= V4.2.0 \u003c V4.2.5), SIPLUS ET 200SP IM 155-6 PN HF TX RAIL (6AG2155-6AU01-4CN0) (All versions \u003e= V4.2.0 \u003c V4.2.5), SIPLUS NET PN/PN Coupler (6AG2158-3AD10-4XA0) (All versions \u003c V6.0.0). Affected devices do not properly handle S7 protocol session disconnect requests. When receiving a valid S7 protocol Disconnect Request (COTP DR TPDU) on TCP port 102, the devices enter an improper session state.\r\n\r\nThis could allow an attacker to cause the device to become unresponsive, leading to a denial-of-service condition that requires a power cycle to restore normal operation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-09T08:46:51.475Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-674753.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2025-40944",
    "datePublished": "2026-01-13T09:44:05.792Z",
    "dateReserved": "2025-04-16T09:06:15.879Z",
    "dateUpdated": "2026-06-09T08:46:51.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.