Critical severity9.8NVD Advisory· Published May 13, 2025· Updated Jun 17, 2026
CVE-2025-26390
CVE-2025-26390
Description
A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
60+ 1 more
- (no CPE)range: 0
- (no CPE)range: <V6.0
<V6.0+ 1 more
- (no CPE)range: <V6.0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/html/ssa-047424.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.