9.1
Critical
CVE-2025-40804 A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions)
Description
A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC Virtualization as a Service (SIVaaS) | Versions not published |