CVE-2025-40805

Published Jan 13, 2026 CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Description
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Siemens
Siemens industrial Edge Cloud Device (iecd)
Siemens industrial Edge Device Kit
Siemens industrial Edge Own Device (ieod)
Siemens industrial Edge Virtual Device (ievd)
Siemens scalance Lpe9413
Siemens scalance Lpe9433
Siemens simatic Automation Workstation
Siemens simatic Hmi Mtp1000
Siemens simatic Hmi Mtp1200
Siemens simatic Hmi Mtp1500
Siemens simatic Hmi Mtp1900
Siemens simatic Hmi Mtp2200
Siemens simatic Hmi Mtp700
Siemens simatic Iot2050
Siemens simatic Ipc127e
Siemens simatic Ipc227e
Siemens simatic Ipc227g
Siemens simatic Ipc427e
Siemens simatic Ipc847e
Siemens simatic Ipc Bx-39a
Siemens simatic Ipc Bx-59a
Siemens siplus Hmi Mtp1000
Siemens siplus Hmi Mtp1200
Siemens siplus Hmi Mtp700
Vendors & Products Siemens
Siemens industrial Edge Cloud Device (iecd)
Siemens industrial Edge Device Kit
Siemens industrial Edge Own Device (ieod)
Siemens industrial Edge Virtual Device (ievd)
Siemens scalance Lpe9413
Siemens scalance Lpe9433
Siemens simatic Automation Workstation
Siemens simatic Hmi Mtp1000
Siemens simatic Hmi Mtp1200
Siemens simatic Hmi Mtp1500
Siemens simatic Hmi Mtp1900
Siemens simatic Hmi Mtp2200
Siemens simatic Hmi Mtp700
Siemens simatic Iot2050
Siemens simatic Ipc127e
Siemens simatic Ipc227e
Siemens simatic Ipc227g
Siemens simatic Ipc427e
Siemens simatic Ipc847e
Siemens simatic Ipc Bx-39a
Siemens simatic Ipc Bx-59a
Siemens siplus Hmi Mtp1000
Siemens siplus Hmi Mtp1200
Siemens siplus Hmi Mtp700
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Weaknesses CWE-639
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}