Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Dec 9, 2025
CVE-2025-40937
CVE-2025-40937
Description
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments. This could allow an authenticated attacker to execute arbitrary code with limited privileges.
Affected products
2- Range: < V4.0.1
- Siemens/SIMATIC CN 4100v5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.