QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-40594

Back to search

CVE-2025-40594

Published: Sep 9, 2025

Modified: Mar 10, 2026

PUBLISHED

CVSS v3.1

6.3

MEDIUM

Description

A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.

VendorProductVersions

Siemens

SINAMICS G220 V6.4

affected
0 - < V6.4 HF2

Siemens

SINAMICS S200 V6.4

affected
0 - < V6.4 HF7

Siemens

SINAMICS S210 V6.4

affected
0 - < V6.4 HF2

Weaknesses (CWE)

CWE-269

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

None

Integrity

High

Availability

Low

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now