Vulnetix
Try Vulnetix Request Demo
CVE-2025-40743 PUBLISHED CVSS 8.300000190734863 HIGH

A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5), SINUMERIK MC (All versions < V1.25 SP1), SINUMERIK MC V1.15 (All versions < V1.15 SP5), SINUMERIK ONE (All versions < V6.25 SP1), SINUMERIK ONE V6.15 (All versions < V6.15 SP5). The affected application improperly validates authentication for its VNC access service, allowing access with insufficient password verification. This could allow an attacker to gain unauthorized remote access and potentially compromise system confidentiality, integrity, or availability.

EPSS 0.03% · 6.9th percentile

Risk Scores

CVSS v3.1
8.300000190734863
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
EPSS Score
0.03%
6.9th percentile

Affected Products

VendorProductVersions
SiemensSINUMERIK ONE V6.150
SiemensSINUMERIK MC0
SiemensSINUMERIK ONE0
SiemensSINUMERIK 828D PPU.40
SiemensSINUMERIK MC V1.150
SiemensSINUMERIK 828D PPU.50
SiemensSINUMERIK 840D sl0

Timeline

References

Open in Interactive Console →