CVE-2025-40753
BaseFortify
Publication date: 2025-08-12
Last updated on: 2025-08-12
Assigner: Siemens AG
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| siemens | power_meter_sicam_q200 | * |
| siemens | power_meter_sicam_q100 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-312 | The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects certain versions of POWER METER SICAM Q100 and Q200 devices. The issue is that the devices export the SMTP account password as plain text in the configuration file. This means that an authenticated local attacker could extract the password and potentially misuse the SMTP service configured on the device.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an authenticated local attacker to obtain the SMTP account password and use the SMTP service for arbitrary purposes. This could lead to unauthorized email sending or other misuse of the SMTP service, potentially impacting system security and trust.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking the configuration files of the affected POWER METER SICAM Q100 and Q200 devices for the presence of SMTP account passwords stored in plain text. Since the vulnerability involves local access to configuration files, commands to inspect these files on the device or system where the meter is managed would be necessary. However, specific commands are not provided in the available information.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting local access to the affected devices to trusted personnel only, as the vulnerability requires authenticated local access. Additionally, upgrading the device firmware to a version outside the vulnerable range (versions below V2.60 or at/above V2.62 for Q100, and below V2.70 or at/above V2.80 for Q200) when available would mitigate the issue. If upgrading is not immediately possible, ensure that configuration files are protected and monitor for unauthorized access.