5.5
Medium
CVE-2025-40584 A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions),…
Description
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMOTION SCOUT TIA V5.4 | Versions not published | |
| SIMOTION SCOUT TIA V5.5 | Versions not published | |
| SIMOTION SCOUT TIA V5.6 | Versions not published | |
| SIMOTION SCOUT TIA V5.7 | Versions not published | |
| SIMOTION SCOUT V5.4 | Versions not published | |
| SIMOTION SCOUT V5.5 | Versions not published | |
| SIMOTION SCOUT V5.6 | Versions not published | |
| SIMOTION SCOUT V5.7 | Versions not published | |
| SINAMICS STARTER V5.5 | Versions not published |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SINAMICS STARTER V5.6 | Versions not published | |
| SINAMICS STARTER V5.7 | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMOTION SCOUT TIA V5.4
The 6 CVEs of SIMOTION SCOUT TIA V5.4 →
CVE-2025-40759
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17…
7.8
High
CVE-2024-54678
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
8.2
High
CVE-2024-52051
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions),…
7.3
High
CVE-2024-49849
A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions),…
7.8
High