CVE-2025-40584

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-12 · updated 2026-06-17
Weakness: CWE-611

Description

A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.

Affected products

Siemens SIMOTION SCOUT TIA V5.4: all versions
Siemens SIMOTION SCOUT TIA V5.5: all versions
Siemens SIMOTION SCOUT TIA V5.6: before V5.6 SP1 HF7 — fixed in V5.6 SP1 HF7
Siemens SIMOTION SCOUT TIA V5.7: before V5.7 SP1 HF1 — fixed in V5.7 SP1 HF1
Siemens SIMOTION SCOUT V5.4: all versions
Siemens SIMOTION SCOUT V5.5: all versions
Siemens SIMOTION SCOUT V5.6: before V5.6 SP1 HF7 — fixed in V5.6 SP1 HF7
Siemens SIMOTION SCOUT V5.7: before V5.7 SP1 HF1 — fixed in V5.7 SP1 HF1
Siemens SINAMICS STARTER V5.5: all versions
Siemens SINAMICS STARTER V5.6: all versions
Siemens SINAMICS STARTER V5.7: before V5.7 HF2 — fixed in V5.7 HF2

How to fix

Upgrade to a fixed version: Siemens SIMOTION SCOUT TIA V5.6 V5.6 SP1 HF7; Siemens SIMOTION SCOUT TIA V5.7 V5.7 SP1 HF1; Siemens SIMOTION SCOUT V5.6 V5.6 SP1 HF7; Siemens SIMOTION SCOUT V5.7 V5.7 SP1 HF1; Siemens SINAMICS STARTER V5.7 V5.7 HF2. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-186293.html

Get alerted when CVE-2025-40584 or the next vulnerability affects your stack