SecuriTricks - CVE-2025-40743

Description

A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5), SINUMERIK MC (All versions < V1.25 SP1), SINUMERIK MC V1.15 (All versions < V1.15 SP5), SINUMERIK ONE (All versions < V6.25 SP1), SINUMERIK ONE V6.15 (All versions < V6.15 SP5). The affected application improperly validates authentication for its VNC access service, allowing access with insufficient password verification. This could allow an attacker to gain unauthorized remote access and potentially compromise system confidentiality, integrity, or availability.

Product(s) Impacted

Vendor	Product	Versions
Siemens	Sinumerik 828d Ppu Sinumerik 840d Sl Sinumerik Mc Sinumerik Mc V1.15 Sinumerik One Sinumerik One V6.15	<=4.95.sp5, <=5.25.sp1 <=4.95.sp5 <=1.25.sp1 <=1.15.sp5 <=6.25.sp1 <=6.15.sp5

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	siemens	sinumerik_828d_ppu	<=4.95.sp5	/	/	/	/	/	/	/
a	siemens	sinumerik_828d_ppu	<=5.25.sp1	/	/	/	/	/	/	/
a	siemens	sinumerik_840d_sl	<=4.95.sp5	/	/	/	/	/	/	/
a	siemens	sinumerik_mc	<=1.25.sp1	/	/	/	/	/	/	/
a	siemens	sinumerik_mc_v1.15	<=1.15.sp5	/	/	/	/	/	/	/
a	siemens	sinumerik_one	<=6.25.sp1	/	/	/	/	/	/	/
a	siemens	sinumerik_one_v6.15	<=6.15.sp5	/	/	/	/	/	/	/

References

https://cert-portal.siemens.com/productcert/html/ssa-177847.html

CVSS Score

8.7 / 10

CVSS Data - 4.0

Attack Vector: ADJACENT
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: LOW
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: Aug. 12, 2025, 12:15 p.m.
Last Modified: Aug. 12, 2025, 2:25 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

productcert@siemens.com

CVE-2025-40743