Skip to content
fr Sign in
9.8 Critical

CVE-2025-40771 A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP…

Description

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.4.24). Affected devices do not properly authenticate configuration connections. This could allow an unauthenticated remote attacker to access the configuration data.

Affected products and versions

Product Affected versions Fixed in
SIMATIC CP 1542SP-1 2.4 earliest → < 2.4.24 2.4.24
SIMATIC CP 1542SP-1 IRC 2.4 earliest → < 2.4.24 2.4.24
SIMATIC CP 1543SP-1 2.4 earliest → < 2.4.24 2.4.24
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 2.4 earliest → < 2.4.24 2.4.24
SIPLUS ET 200SP CP 1543SP-1 ISEC 2.4 earliest → < 2.4.24 2.4.24
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL 2.4 earliest → < 2.4.24 2.4.24

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC CP 1542SP-1

The 8 CVEs of SIMATIC CP 1542SP-1 →
CVE-2023-50763 A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP… 4.9 Medium CVE-2023-38380 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl 7.5 High CVE-2022-43768 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP… 7.5 High CVE-2022-43767 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP… 7.5 High
Track this CVE