Skip to main content
← All vulnerabilities
CVE-2026-41125

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V3.92
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Siemens blueplanet 100 NX3 M8

    fixed in *

  • Siemens blueplanet 100 TL3 GEN2

    fixed in *

  • Siemens blueplanet 105 TL3

    fixed in V3.92

  • Siemens blueplanet 105 TL3 GEN2

    fixed in *

  • Siemens blueplanet 110 TL3

    fixed in V3.92

  • Siemens blueplanet 125 NX3 M10

    fixed in *

  • Siemens blueplanet 125 TL3

    fixed in V3.92

  • Siemens blueplanet 125 TL3 GEN2

    fixed in *

  • Siemens blueplanet 137 TL3

    fixed in V3.92

  • Siemens blueplanet 150 TL3

    fixed in V3.92

  • Siemens blueplanet 150 TL3 GEN2

    fixed in *

  • Siemens blueplanet 155 TL3

    fixed in V3.92

  • Siemens blueplanet 155 TL3 GEN2

    fixed in *

  • Siemens blueplanet 165 TL3

    fixed in V3.92

  • Siemens blueplanet 165 TL3 GEN2

    fixed in *

  • Siemens blueplanet 25.0 NX3-33.0 NX3

    Version range not reported

  • Siemens blueplanet 3.0 NX3-20.0 NX3

    Version range not reported

  • Siemens blueplanet 3.0-5.0 NX1

    Version range not reported

  • Siemens blueplanet 360 NX3 M6

    Version range not reported

  • Siemens blueplanet 50.0 NX3-60.0 NX3

    Version range not reported

  • Siemens blueplanet 87.0 TL3

    fixed in V3.92

  • Siemens blueplanet 87.0 TL3 GEN2

    fixed in *

  • Siemens blueplanet 92.0 TL3

    fixed in V3.92

  • Siemens blueplanet 92.0 TL3 GEN2

    fixed in *

  • Siemens blueplanet gridsave 110 TL3-S

    fixed in V3.92

  • Siemens blueplanet gridsave 137 TL3-S

    fixed in V3.92

  • Siemens blueplanet gridsave 92.0 TL3-S

    fixed in V3.92

  • Siemens blueplanet hybrid 10.0 TL3

    Version range not reported

  • Siemens blueplanet hybrid 6.0 NH3-12.0 NH3

    Version range not reported

References 1

cert-portal.siemens.com