5.5
Moyenne
CVE-2025-40584 A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions),…
Description
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMOTION SCOUT TIA V5.4 | Versions non publiées | |
| SIMOTION SCOUT TIA V5.5 | Versions non publiées | |
| SIMOTION SCOUT TIA V5.6 | Versions non publiées | |
| SIMOTION SCOUT TIA V5.7 | Versions non publiées | |
| SIMOTION SCOUT V5.4 | Versions non publiées | |
| SIMOTION SCOUT V5.5 | Versions non publiées | |
| SIMOTION SCOUT V5.6 | Versions non publiées | |
| SIMOTION SCOUT V5.7 | Versions non publiées | |
| SINAMICS STARTER V5.5 | Versions non publiées |
Afficher les 2 autres branches Masquer les 2 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SINAMICS STARTER V5.6 | Versions non publiées | |
| SINAMICS STARTER V5.7 | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMOTION SCOUT TIA V5.4
Les 6 CVE de SIMOTION SCOUT TIA V5.4 →
CVE-2025-40759
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17…
7.8
Élevée
CVE-2024-54678
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC…
8.2
Élevée
CVE-2024-52051
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions),…
7.3
Élevée
CVE-2024-49849
A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions),…
7.8
Élevée