CVE-2025-40805 PUBLISHED

Assigner: siemens
Reserved: 16.04.2025 Published: 13.01.2026 Updated: 13.01.2026

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 10

Attack Vector	Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score: 10

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Network	Confidentiality	High	Confidentiality	High
Attack Complexity	Low	Integrity	High	Integrity	High
Attack Requirements	None	Availability	High	Availability	High
Privileges Required	None
User Interaction	None

CVSS 4.0

Product Status

Vendor	Siemens
Product	Industrial Edge Cloud Device (IECD)
Versions	Default: unknown affected from 0 to V1.24.2 (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.10
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.11
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.12
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.13
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.14
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.15
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.16
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.17
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.18
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.19
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.20
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.21
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.22
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.23
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.24
Versions	Default: unknown affected from 0 to V1.24.2 (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.25
Versions	Default: unknown affected from 0 to V1.25.1 (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.5
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.6
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.7
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.8
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - arm64 V1.9
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.10
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.11
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.12
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.13
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.14
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.15
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.16
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.17
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.18
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.19
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.20
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.21
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.22
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.23
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.24
Versions	Default: unknown affected from 0 to V1.24.2 (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.25
Versions	Default: unknown affected from 0 to V1.25.1 (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.5
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.6
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.7
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.8
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Device Kit - x86-64 V1.9
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	Industrial Edge Own Device (IEOD)
Versions	Default: unknown affected from 0 to V1.24.2 (excl.)

Vendor	Siemens
Product	Industrial Edge Virtual Device (IEVD)
Versions	Default: unknown affected from 0 to V1.24.2 (excl.)

Vendor	Siemens
Product	SCALANCE LPE9413
Versions	Default: unknown affected from 0 to V2.2 (excl.)

Vendor	Siemens
Product	SCALANCE LPE9433
Versions	Default: unknown affected from 0 to V2.2 (excl.)

Vendor	Siemens
Product	SIMATIC Automation Workstation 19"
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIMATIC Automation Workstation 24"
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1000 Unified Comfort Panel
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1000 Unified Comfort Panel hygienic
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1000, Unified Comfort Panel neutral
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Unified Comfort Panel
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Unified Comfort Panel hygienic
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1200 Unified Comfort Panel neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Unified Comfort Panel
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Unified Comfort Panel hygienic
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1500 Unified Comfort Panel neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Unified Comfort Panel
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Unified Comfort Panel hygienic
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP1900 Unified Comfort Panel neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Unified Comfort Hygienic
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Unified Comfort Panel
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP2200 Unified Comfort Panel neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP700 Unified Comfort Panel
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC HMI MTP700, Unified Comfort Panel neutral design
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIMATIC IOT2050
Versions	Default: unknown affected from 0 to V1.25.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC BX-39A Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC BX-59A Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC127E Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC227E Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC227G Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC427E Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIMATIC IPC847E Industrial Edge Device
Versions	Default: unknown affected from 0 to V3.1 (excl.)

Vendor	Siemens
Product	SIPLUS HMI MTP1000 Unified Comfort
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIPLUS HMI MTP1200 Unified Comfort
Versions	Default: unknown affected from 0 to V21 (excl.)

Vendor	Siemens
Product	SIPLUS HMI MTP700 Unified Comfort
Versions	Default: unknown affected from 0 to V21 (excl.)

References

Problem Types

CWE-639: Authorization Bypass Through User-Controlled Key CWE