CVE-2025-40594

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-09 · updated 2026-10-23
Weakness: CWE-269

Description

A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.

Affected products

Siemens Sinamics G220 Firmware: 6.4, 6.4-hf1
Siemens Sinamics S200 Firmware: 6.4
Siemens Sinamics S210 Firmware: 6.4, 6.4-hf1

References

https://cert-portal.siemens.com/productcert/html/ssa-027652.html

Get alerted when CVE-2025-40594 or the next vulnerability affects your stack