10.0
Critique
CVE-2025-40805 Affected devices do not properly enforce user authentication on specific API endpoints
Description
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Industrial Edge Cloud Device (IECD) 1.24 | premières → < 1.24.2 | 1.24.2 |
| Industrial Edge Device Kit - arm64 V1.10 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.11 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.12 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.13 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.14 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.15 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.16 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.17 | Versions non publiées |
Afficher les 98 autres branches Masquer les 98 autres branches
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification