CVE-2025-40805
Affected devices do not properly enforce user authentication on specific API endpoints.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V1.24.2, V1.25.1, V2.2, V1.3, V21, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Siemens Industrial Edge Cloud Device (IECD)
fixed in V1.24.2
- Siemens Industrial Edge Device Kit - arm64 V1.10
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.11
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.12
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.13
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.14
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.15
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.16
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.17
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.18
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.19
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.20
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.21
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.22
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.23
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.24
fixed in V1.24.2
- Siemens Industrial Edge Device Kit - arm64 V1.25
fixed in V1.25.1
- Siemens Industrial Edge Device Kit - arm64 V1.5
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.6
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.7
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.8
All versions
- Siemens Industrial Edge Device Kit - arm64 V1.9
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.10
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.11
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.12
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.13
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.14
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.15
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.16
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.17
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.18
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.19
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.20
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.21
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.22
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.23
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.24
fixed in V1.24.2
- Siemens Industrial Edge Device Kit - x86-64 V1.25
fixed in V1.25.1
- Siemens Industrial Edge Device Kit - x86-64 V1.5
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.6
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.7
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.8
All versions
- Siemens Industrial Edge Device Kit - x86-64 V1.9
All versions
- Siemens Industrial Edge Own Device (IEOD)
fixed in V1.24.2
- Siemens Industrial Edge Virtual Device (IEVD)
fixed in V1.24.2
- Siemens SCALANCE LPE9413
fixed in V2.2
- Siemens SCALANCE LPE9433
fixed in V2.2
- Siemens SIMATIC Automation Workstation 19"
fixed in V1.3
- Siemens SIMATIC Automation Workstation 24"
fixed in V1.3
- Siemens SIMATIC HMI MTP1000 Unified Comfort Panel
fixed in V21
- Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic
fixed in V21
- Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral
fixed in V21
- Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit
fixed in V21
- Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
fixed in V21
- Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP1200 Unified Comfort Panel
fixed in V21
- Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic
fixed in V21
- Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design
fixed in V21
- Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit
fixed in V21
- Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
fixed in V21
- Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP1500 Unified Comfort Panel
fixed in V21
- Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic
fixed in V21
- Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design
fixed in V21
- Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit
fixed in V21
- Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
fixed in V21
- Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP1900 Unified Comfort Panel
fixed in V21
- Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic
fixed in V21
- Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design
fixed in V21
- Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit
fixed in V21
- Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
fixed in V21
- Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
fixed in V21
- Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)
fixed in V21
- Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic
fixed in V21
- Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP2200 Unified Comfort Panel
fixed in V21
- Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design
fixed in V21
- Siemens SIMATIC HMI MTP700 Unified Comfort Panel
fixed in V21
- Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
fixed in V21
- Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design
fixed in V21
- Siemens SIMATIC IOT2050
fixed in V1.25.1
- Siemens SIMATIC IPC BX-39A Industrial Edge Device
fixed in V3.1
- Siemens SIMATIC IPC BX-59A Industrial Edge Device
fixed in V3.1
- Siemens SIMATIC IPC127E Industrial Edge Device
fixed in V3.1
- Siemens SIMATIC IPC227E Industrial Edge Device
fixed in V3.1
- Siemens SIMATIC IPC227G Industrial Edge Device
fixed in V3.1
- Siemens SIMATIC IPC427E Industrial Edge Device
fixed in V3.1
- Siemens SIMATIC IPC847E Industrial Edge Device
fixed in V3.1
- Siemens SIPLUS HMI MTP1000 Unified Comfort
fixed in V21
- Siemens SIPLUS HMI MTP1200 Unified Comfort
fixed in V21
- Siemens SIPLUS HMI MTP700 Unified Comfort
fixed in V21