Skip to content
fr Sign in
10.0 Critical

CVE-2025-40805 Affected devices do not properly enforce user authentication on specific API endpoints

Description

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

Affected products and versions

Product Affected versions Fixed in
Industrial Edge Cloud Device (IECD) 1.24 earliest → < 1.24.2 1.24.2
Industrial Edge Device Kit - arm64 V1.10 Versions not published
Industrial Edge Device Kit - arm64 V1.11 Versions not published
Industrial Edge Device Kit - arm64 V1.12 Versions not published
Industrial Edge Device Kit - arm64 V1.13 Versions not published
Industrial Edge Device Kit - arm64 V1.14 Versions not published
Industrial Edge Device Kit - arm64 V1.15 Versions not published
Industrial Edge Device Kit - arm64 V1.16 Versions not published
Industrial Edge Device Kit - arm64 V1.17 Versions not published
Show the 98 other branches
Product Affected versions Fixed in
Industrial Edge Device Kit - arm64 V1.18 Versions not published
Industrial Edge Device Kit - arm64 V1.19 Versions not published
Industrial Edge Device Kit - arm64 V1.20 Versions not published
Industrial Edge Device Kit - arm64 V1.21 Versions not published
Industrial Edge Device Kit - arm64 V1.22 Versions not published
Industrial Edge Device Kit - arm64 V1.23 Versions not published
Industrial Edge Device Kit - arm64 V1.24 1.24 earliest → < 1.24.2 1.24.2
Industrial Edge Device Kit - arm64 V1.25 1.25 earliest → < 1.25.1 1.25.1
Industrial Edge Device Kit - arm64 V1.5 Versions not published
Industrial Edge Device Kit - arm64 V1.6 Versions not published
Industrial Edge Device Kit - arm64 V1.7 Versions not published
Industrial Edge Device Kit - arm64 V1.8 Versions not published
Industrial Edge Device Kit - arm64 V1.9 Versions not published
Industrial Edge Device Kit - x86-64 V1.10 Versions not published
Industrial Edge Device Kit - x86-64 V1.11 Versions not published
Industrial Edge Device Kit - x86-64 V1.12 Versions not published
Industrial Edge Device Kit - x86-64 V1.13 Versions not published
Industrial Edge Device Kit - x86-64 V1.14 Versions not published
Industrial Edge Device Kit - x86-64 V1.15 Versions not published
Industrial Edge Device Kit - x86-64 V1.16 Versions not published
Industrial Edge Device Kit - x86-64 V1.17 Versions not published
Industrial Edge Device Kit - x86-64 V1.18 Versions not published
Industrial Edge Device Kit - x86-64 V1.19 Versions not published
Industrial Edge Device Kit - x86-64 V1.20 Versions not published
Industrial Edge Device Kit - x86-64 V1.21 Versions not published
Industrial Edge Device Kit - x86-64 V1.22 Versions not published
Industrial Edge Device Kit - x86-64 V1.23 Versions not published
Industrial Edge Device Kit - x86-64 V1.24 1.24 earliest → < 1.24.2 1.24.2
Industrial Edge Device Kit - x86-64 V1.25 1.25 earliest → < 1.25.1 1.25.1
Industrial Edge Device Kit - x86-64 V1.5 Versions not published
Industrial Edge Device Kit - x86-64 V1.6 Versions not published
Industrial Edge Device Kit - x86-64 V1.7 Versions not published
Industrial Edge Device Kit - x86-64 V1.8 Versions not published
Industrial Edge Device Kit - x86-64 V1.9 Versions not published
Industrial Edge Own Device (IEOD) 1.24 earliest → < 1.24.2 1.24.2
Industrial Edge Virtual Device (IEVD) 1.24 earliest → < 1.24.2 1.24.2
SCALANCE LPE9413 2.2 earliest → < 2.2 2.2
SCALANCE LPE9433 2.2 earliest → < 2.2 2.2
SIMATIC Automation Workstation 19" 1.3 earliest → < 1.3 1.3
SIMATIC Automation Workstation 24" 1.3 earliest → < 1.3 1.3
SIMATIC HMI MTP1000 Unified Comfort Panel 21 earliest → < 21 21
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic 21 earliest → < 21 21
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design 21 earliest → < 21 21
SIMATIC HMI MTP1000, Unified Comfort Panel neutral 21 earliest → < 21 21
SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit 21 earliest → < 21 21
SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio 21 earliest → < 21 21
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP1200 Unified Comfort Panel 21 earliest → < 21 21
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic 21 earliest → < 21 21
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design 21 earliest → < 21 21
SIMATIC HMI MTP1200 Unified Comfort Panel neutral design 21 earliest → < 21 21
SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit 21 earliest → < 21 21
SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio 21 earliest → < 21 21
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP1500 Unified Comfort Panel 21 earliest → < 21 21
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic 21 earliest → < 21 21
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design 21 earliest → < 21 21
SIMATIC HMI MTP1500 Unified Comfort Panel neutral design 21 earliest → < 21 21
SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit 21 earliest → < 21 21
SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio 21 earliest → < 21 21
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP1900 Unified Comfort Panel 21 earliest → < 21 21
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic 21 earliest → < 21 21
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design 21 earliest → < 21 21
SIMATIC HMI MTP1900 Unified Comfort Panel neutral design 21 earliest → < 21 21
SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit 21 earliest → < 21 21
SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) 21 earliest → < 21 21
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio 21 earliest → < 21 21
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) 21 earliest → < 21 21
SIMATIC HMI MTP2200 Unified Comfort Hygienic 21 earliest → < 21 21
SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design 21 earliest → < 21 21
SIMATIC HMI MTP2200 Unified Comfort Panel 21 earliest → < 21 21
SIMATIC HMI MTP2200 Unified Comfort Panel neutral design 21 earliest → < 21 21
SIMATIC HMI MTP700 Unified Comfort Panel 21 earliest → < 21 21
SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design 21 earliest → < 21 21
SIMATIC HMI MTP700, Unified Comfort Panel neutral design 21 earliest → < 21 21
SIMATIC IOT2050 1.25 earliest → < 1.25.1 1.25.1
SIMATIC IPC BX-39A Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIMATIC IPC BX-59A Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIMATIC IPC127E Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIMATIC IPC227E Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIMATIC IPC227G Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIMATIC IPC427E Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIMATIC IPC847E Industrial Edge Device 3.1 earliest → < 3.1 3.1
SIPLUS HMI MTP1000 Unified Comfort 21 earliest → < 21 21
SIPLUS HMI MTP1200 Unified Comfort 21 earliest → < 21 21
SIPLUS HMI MTP700 Unified Comfort 21 earliest → < 21 21

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Industrial Edge Cloud Device (IECD)

The 2 CVEs of Industrial Edge Cloud Device (IECD) →
CVE-2026-44414 A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10,… 6.8 Medium
Track this CVE