CVE-2025-40570
BaseFortify
Publication date: 2025-08-12
Last updated on: 2025-08-12
Assigner: Siemens AG
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | siprotec_5 | 7.80 |
| siemens | siprotec_5 | 10.0 |
| siemens | siprotec_5_compact | 10.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-770 | The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects Siemens SIPROTEC 5 and SIPROTEC 5 Compact devices, which are used for protection, control, measurement, and automation in electrical substations. The affected devices do not properly limit the bandwidth of incoming network packets over their local USB port. An attacker with physical access can send specially crafted high-bandwidth packets to the device, causing it to exhaust its memory and become unresponsive to network traffic via the USB port. After the attack, the device automatically resets itself. The core protection functions of the devices are not affected by this vulnerability. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability can cause the affected device to exhaust its memory and stop responding to network traffic over the local USB port, leading to a temporary denial of service. The device will automatically reset after the attack, which may cause interruptions in the device's operation. However, the main protection functions of the device remain unaffected. This could impact the availability of the device's network communication via USB, potentially disrupting monitoring or control functions that rely on this interface. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
The vulnerability involves devices not properly limiting bandwidth for incoming packets over their local USB port, which requires physical access to exploit. Detection would involve monitoring for unusually high bandwidth or malformed packets on the USB interface of affected SIPROTEC 5 devices. However, no specific detection commands or tools are provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating affected SIPROTEC 5 and SIPROTEC 5 Compact devices to version 10.0 or later, as Siemens has released updates to remediate this issue. Additionally, implement multi-level redundant secondary protection schemes, protect network access with firewalls, segmentation, and VPNs, and configure devices according to Siemens operational guidelines. Ensure updates are validated prior to deployment and supervised by trained personnel. [1]