CNNVD-202509-1424 Information

CNNVD ID

CNNVD-202509-1424

CVE-2025-40804

  • CNNVD Published: 2025-09-09

Description (Chinese)

Siemens SIMATIC Virtualization as a Service(SIVaaS)是德国西门子(Siemens)公司的一款自动化虚拟机。 Siemens SIMATIC Virtualization as a Service存在安全漏洞,该漏洞源于网络共享未经验证,可能导致未经授权的数据访问或修改。

Description (English)

Siemens SIMATIC Virtualization as a Service is an automated virtual machine of Siemens, Germany. Siemens SIMATIC Virtualization as a Service security loophole, which originated from unverified network sharing, may lead to unauthorized data access or modification.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

西门子

Published

2025-09-09

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-534283.html https://vigilance.fr/vulnerability/Siemens-SIMATIC-Virtualization-as-a-Service-file-reading-via-File-Share-48168

Patch

https://www.siemens.com/global/en.html

Share on: