CVE Feed

    Dashboard / CVE / CVE-2025-40771

    CVE-2025-40771

    A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.4.24). Affected devices do not properly authenticate configuration connections. This could allow an unauthenticated remote attacker to access the configuration data.

    Published:Oct 14, 2025
    Last Modified:Apr 15, 2026
    EPS:Oct 14, 2025
    EPSS Score:0.00117
    CVSS Score:9.8

    Affected Products

    Vendor
    Siemens
    Product
    Simatic Cp 1542sp-1
    Vendor
    Siemens
    Product
    Simatic Cp 1542sp-1 Irc
    Vendor
    Siemens
    Product
    Simatic Cp 1543sp-1
    Vendor
    Siemens
    Product
    Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail
    Vendor
    Siemens
    Product
    Siplus Et 200sp Cp 1543sp-1 Isec
    Vendor
    Siemens
    Product
    Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-50763 (CVSS 6.9) — A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC…
    CVE-2022-43768 (CVSS 7.5) — A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM…
    CVE-2022-43767 (CVSS 7.5) — A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM…
    CVE-2022-43716 (CVSS 7.5) — A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM…
    CVE-2021-41991 (CVSS 7.5) — The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many r…
    CVE-2017-2681 (CVSS 7.1) — Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could…
    CVE-2017-2680 (CVSS 7.1) — Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected product…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High