CVE-2025-40805 json
Affected devices do not properly enforce user authentication on specific API endpoints.
published 2026-01-13 9 mo ago modified 2026-06-17 4 mo ago also EUVD-2026-2362
- cvss
- 10.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 51%
- public exploits
- 0
- none known
Summary
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Patch / fix
- Siemens Industrial Edge Cloud Device (IECD) V1.24.2
- Siemens Industrial Edge Device Kit - arm64 V1.24 V1.24.2
- Siemens Industrial Edge Device Kit - arm64 V1.25 V1.25.1
- Siemens Industrial Edge Device Kit - x86-64 V1.24 V1.24.2
- Siemens Industrial Edge Device Kit - x86-64 V1.25 V1.25.1
- Siemens Industrial Edge Own Device (IEOD) V1.24.2
- Siemens Industrial Edge Virtual Device (IEVD) V1.24.2
- Siemens SCALANCE LPE9413 V2.2
- Siemens SCALANCE LPE9433 V2.2
- Siemens SIMATIC Automation Workstation 19" V1.3
- Siemens SIMATIC Automation Workstation 24" V1.3
- Siemens SIMATIC HMI MTP1000 Unified Comfort Panel V21
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
cisa ICSA-26-015-08 updated cvss 10.0
Siemens Industrial Edge Devices
-
Siemens Industrial Edge Cloud Device (IECD) < 1.24.2affected: fixed in V1.24.2, mitigation docs.industrial-operations-x.siemens.cloud
-
Siemens Industrial Edge Own Device (IEOD) < 1.24.2affected: fixed in V1.24.2, mitigation docs.industrial-operations-x.siemens.cloud
-
Siemens Industrial Edge Virtual Device (IEVD) < 1.24.2affected: fixed in V1.24.2, mitigation docs.industrial-operations-x.siemens.cloud
-
Siemens SCALANCE LPE9413 (6GK5998-3GS01-2AC2) < 2.2affected: fixed in V2.2, mitigation docs.eu1.edge.siemens.cloud
-
Siemens SCALANCE LPE9433 (6GK5998-3GS11-2AC2) < 2.2affected: fixed in V2.2, mitigation docs.eu1.edge.siemens.cloud
-
Siemens SIMATIC Automation Workstation 19" (6AV7256-6CA01-0FP0) < 1.3 Siemens SIMATIC Automation Workstation 24" (6AV7256-6CA00-0FP0) < 1.3affected: fixed in V1.3, mitigation iehub.eu1.edge.siemens.cloud
-
Siemens SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) < 21 Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) < 21 Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) < 21 Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) < 21 Siemens SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) < 21 Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) < 21affected: fixed in V21, mitigation support.industry.siemens.com
+27 more productsfewer
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) < 21 Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) < 21 Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0) < 21 Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0) < 21 Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0) < 21 Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0) < 21 Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0) < 21 Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0) < 21 Siemens SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) < 21 Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) < 21 Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) < 21 Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) < 21 Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0) < 21 Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0) < 21 Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0) < 21 Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0) < 21 Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0) < 21 Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0) < 21 Siemens SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) < 21 Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) < 21 Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) < 21 Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) < 21 Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0) < 21 Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0) < 21 Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0) < 21 Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0) < 21 Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0) < 21
26 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-26-015-09 updated cvss 10.0
Siemens Industrial Edge Device Kit
-
Siemens Industrial Edge Device Kit - arm64 V1.5 Siemens Industrial Edge Device Kit - arm64 V1.6 Siemens Industrial Edge Device Kit - arm64 V1.7 Siemens Industrial Edge Device Kit - arm64 V1.8 Siemens Industrial Edge Device Kit - arm64 V1.9 Siemens Industrial Edge Device Kit - arm64 V1.10affected: mitigation, no fix planned
+13 more productsfewer
Siemens Industrial Edge Device Kit - arm64 V1.11 Siemens Industrial Edge Device Kit - arm64 V1.12 Siemens Industrial Edge Device Kit - arm64 V1.13 Siemens Industrial Edge Device Kit - arm64 V1.14 Siemens Industrial Edge Device Kit - arm64 V1.15 Siemens Industrial Edge Device Kit - arm64 V1.16 Siemens Industrial Edge Device Kit - arm64 V1.17 Siemens Industrial Edge Device Kit - arm64 V1.18 Siemens Industrial Edge Device Kit - arm64 V1.19 Siemens Industrial Edge Device Kit - arm64 V1.20 Siemens Industrial Edge Device Kit - arm64 V1.21 Siemens Industrial Edge Device Kit - arm64 V1.22 Siemens Industrial Edge Device Kit - arm64 V1.23 -
Siemens Industrial Edge Device Kit - arm64 V1.24 < 1.24.2affected: fixed in V1.24.2, mitigation
-
Siemens Industrial Edge Device Kit - arm64 V1.25 < 1.25.1affected: fixed in V1.25.1, mitigation
-
Siemens Industrial Edge Device Kit - x86-64 V1.5 Siemens Industrial Edge Device Kit - x86-64 V1.6 Siemens Industrial Edge Device Kit - x86-64 V1.7 Siemens Industrial Edge Device Kit - x86-64 V1.8 Siemens Industrial Edge Device Kit - x86-64 V1.9 Siemens Industrial Edge Device Kit - x86-64 V1.10affected: mitigation, no fix planned
+13 more productsfewer
Siemens Industrial Edge Device Kit - x86-64 V1.11 Siemens Industrial Edge Device Kit - x86-64 V1.12 Siemens Industrial Edge Device Kit - x86-64 V1.13 Siemens Industrial Edge Device Kit - x86-64 V1.14 Siemens Industrial Edge Device Kit - x86-64 V1.15 Siemens Industrial Edge Device Kit - x86-64 V1.16 Siemens Industrial Edge Device Kit - x86-64 V1.17 Siemens Industrial Edge Device Kit - x86-64 V1.18 Siemens Industrial Edge Device Kit - x86-64 V1.19 Siemens Industrial Edge Device Kit - x86-64 V1.20 Siemens Industrial Edge Device Kit - x86-64 V1.21 Siemens Industrial Edge Device Kit - x86-64 V1.22 Siemens Industrial Edge Device Kit - x86-64 V1.23
2 more affected in the full advisory
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 9 mo ago
Exploit prediction
0.65% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| CNA | 4.0 | 10.0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
| CNA | 4.0 | 10.0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- Siemens Industrial Edge Cloud Device (IECD)
- Siemens Industrial Edge Device Kit - arm64 V1.10
- Siemens Industrial Edge Device Kit - arm64 V1.11
- Siemens Industrial Edge Device Kit - arm64 V1.12
- Siemens Industrial Edge Device Kit - arm64 V1.13
- Siemens Industrial Edge Device Kit - arm64 V1.14
- Siemens Industrial Edge Device Kit - arm64 V1.15
- Siemens Industrial Edge Device Kit - arm64 V1.16
- Siemens Industrial Edge Device Kit - arm64 V1.17
- Siemens Industrial Edge Device Kit - arm64 V1.18
- Siemens Industrial Edge Device Kit - arm64 V1.19
- Siemens Industrial Edge Device Kit - arm64 V1.20
- Siemens Industrial Edge Device Kit - arm64 V1.21
- Siemens Industrial Edge Device Kit - arm64 V1.22
- Siemens Industrial Edge Device Kit - arm64 V1.23
- Siemens Industrial Edge Device Kit - arm64 V1.24
- Siemens Industrial Edge Device Kit - arm64 V1.25
- Siemens Industrial Edge Device Kit - arm64 V1.5
- Siemens Industrial Edge Device Kit - arm64 V1.6
- Siemens Industrial Edge Device Kit - arm64 V1.7
- Siemens Industrial Edge Device Kit - arm64 V1.8
- Siemens Industrial Edge Device Kit - arm64 V1.9
- Siemens Industrial Edge Device Kit - x86-64 V1.10
- Siemens Industrial Edge Device Kit - x86-64 V1.11
- Siemens Industrial Edge Device Kit - x86-64 V1.12
- Siemens Industrial Edge Device Kit - x86-64 V1.13
- Siemens Industrial Edge Device Kit - x86-64 V1.14
- Siemens Industrial Edge Device Kit - x86-64 V1.15
- Siemens Industrial Edge Device Kit - x86-64 V1.16
- Siemens Industrial Edge Device Kit - x86-64 V1.17
- Siemens Industrial Edge Device Kit - x86-64 V1.18
- Siemens Industrial Edge Device Kit - x86-64 V1.19
- Siemens Industrial Edge Device Kit - x86-64 V1.20
- Siemens Industrial Edge Device Kit - x86-64 V1.21
- Siemens Industrial Edge Device Kit - x86-64 V1.22
- Siemens Industrial Edge Device Kit - x86-64 V1.23
- Siemens Industrial Edge Device Kit - x86-64 V1.24
- Siemens Industrial Edge Device Kit - x86-64 V1.25
- Siemens Industrial Edge Device Kit - x86-64 V1.5
- Siemens Industrial Edge Device Kit - x86-64 V1.6
- Siemens Industrial Edge Device Kit - x86-64 V1.7
- Siemens Industrial Edge Device Kit - x86-64 V1.8
- Siemens Industrial Edge Device Kit - x86-64 V1.9
- Siemens Industrial Edge Own Device (IEOD)
- Siemens Industrial Edge Virtual Device (IEVD)
- Siemens SCALANCE LPE9413
- Siemens SCALANCE LPE9433
- Siemens SIMATIC Automation Workstation 19"
- Siemens SIMATIC Automation Workstation 24"
- Siemens SIMATIC HMI MTP1000 Unified Comfort Panel
Classification
- Weakness
-
- CWE-639 Authorization Bypass Through User-Controlled Key
References
Sources
- CVE List CVE-2025-40805
- NVD CVE-2025-40805
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.