CVE-2025-40584
BaseFortify
Publication date: 2025-08-12
Last updated on: 2025-10-14
Assigner: Siemens AG
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | sinamics_starter | 5.7 |
| siemens | sinamics_starter | 5.6 |
| siemens | simotion_scout_tia | 5.5 |
| siemens | simotion_scout_tia | 5.6 |
| siemens | simotion_scout | 5.4 |
| siemens | simotion_scout_tia | 5.7 |
| siemens | simotion_scout | 5.6 |
| siemens | simotion_scout | 5.5 |
| siemens | sinamics_starter | 5.5 |
| siemens | simotion_scout_tia | 5.4 |
| siemens | simotion_scout | 5.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-611 | The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an XML External Entity (XXE) Injection found in certain Siemens products (SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER). It occurs when the affected applications improperly handle specially crafted XML files, allowing an attacker to exploit this flaw to read arbitrary files on the system without authorization. [1]
How can this vulnerability impact me? :
The vulnerability can allow an attacker to read arbitrary files on the affected system, potentially exposing sensitive information stored on the device. This unauthorized file access could lead to information disclosure and compromise the confidentiality of data within the affected environment. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include avoiding opening untrusted XML files in the affected applications, updating affected products to the latest fixed versions where available (e.g., SIMOTION SCOUT V5.6 SP1 HF7 or later, V5.7 SP1 HF1 or later), and applying recommended workarounds for products without available fixes. Additionally, protect network access to devices and configure environments according to Siemens' operational guidelines for Industrial Security. Consult Siemens' general security recommendations and product manuals for further protective measures. [1]