Unrated severityNVD Advisory· Published May 13, 2025· Updated May 13, 2025
CVE-2025-40566
CVE-2025-40566
Description
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: V4.1 < V4.1 Update 3, V5.0 < V5.0 Update 1
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.